last executing test programs: 20m51.708258137s ago: executing program 32 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x682201, 0x0) close(r1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 18m26.198497751s ago: executing program 33 (id=710): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) execve(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x5) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) 15m24.27062329s ago: executing program 34 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 12m53.867731769s ago: executing program 35 (id=1644): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) 9m44.679461866s ago: executing program 8 (id=2186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 9m40.630729538s ago: executing program 8 (id=2202): socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 9m37.923941274s ago: executing program 8 (id=2210): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="fa", 0x1, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 9m37.481010235s ago: executing program 8 (id=2213): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000240)=[0x2004], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mq_open(0x0, 0x1, 0x0, &(0x7f0000000040)={0x20001294, 0x2, 0x5, 0x6}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r3, 0x0) 9m36.754332319s ago: executing program 8 (id=2214): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xc0, 0x0, 0x4000}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4044844) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xffffffffffffffff, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m36.282038974s ago: executing program 8 (id=2215): socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000440)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x1000, @remote, 0x9}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xe5fb, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10020, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 9m20.025815488s ago: executing program 36 (id=2215): socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000440)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x1000, @remote, 0x9}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xe5fb, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10020, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8m29.655095s ago: executing program 2 (id=2348): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 8m27.625025549s ago: executing program 2 (id=2362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000254000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a310000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r0, r2) close_range(r3, 0xffffffffffffffff, 0x0) 8m27.235675222s ago: executing program 2 (id=2365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0c", 0xe) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2}, 0x8005}], 0x1, 0x0, 0x0) 8m25.922434959s ago: executing program 2 (id=2368): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8m25.12545021s ago: executing program 2 (id=2369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x400000000000e, 0x4, 0x4, 0x9, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xbde], 0xffff1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x10201, 0x80, 0xc0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 8m24.818372133s ago: executing program 2 (id=2372): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240), 0x8) r5 = epoll_create(0x5) r6 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x300, r6, &(0x7f0000000040)={0x32000000}) 8m8.51870496s ago: executing program 37 (id=2372): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240), 0x8) r5 = epoll_create(0x5) r6 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x300, r6, &(0x7f0000000040)={0x32000000}) 1m57.80241024s ago: executing program 3 (id=3693): openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) writev(r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 1m52.622719353s ago: executing program 0 (id=3700): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) name_to_handle_at(r1, &(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)=@xfs={0x1c, 0x81, {0x4, 0x8000, 0x8000000000000000, 0x6}}, &(0x7f0000000780), 0x1000) 1m52.205703787s ago: executing program 0 (id=3703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 1m51.833354634s ago: executing program 3 (id=3706): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x407, 0x2, 0x108, 0x0, 0x2, 0x207f, 0x10}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = socket(0x10, 0x803, 0x0) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz1\x00', {0x400, 0x36b5, 0x7d0, 0x8}, 0x40, [0x0, 0x7, 0x45d3, 0x7, 0x456, 0x2, 0xffffff34, 0x2, 0x80000001, 0x6, 0x7fffffff, 0x5, 0xf2290d18, 0x3ff, 0xe62, 0x2, 0x5, 0x3, 0x2, 0x2, 0x4, 0x1, 0x4, 0x1000, 0x100, 0x2, 0x6, 0x9, 0x9, 0x80, 0x4, 0x7fffffff, 0xc, 0x4, 0x2, 0x5, 0x49, 0x100, 0x9d, 0x4, 0x6, 0xc, 0x4, 0x40, 0x73, 0x5, 0x7ec, 0xffffffff, 0x1, 0x2, 0xb14d, 0xc8, 0x7fff, 0x8000, 0x53, 0xffffffff, 0x786b, 0xfe000000, 0x176, 0x401, 0x5, 0xb, 0x8], [0x4, 0x10000, 0x0, 0x7, 0xfffffffd, 0x3ff, 0x3, 0x2, 0x100, 0x8, 0x1, 0xa, 0x2, 0x401, 0x4, 0x7, 0x6, 0x4, 0x800, 0x0, 0x7ff, 0x8, 0x80, 0x9, 0x200, 0x1a, 0xd, 0x800, 0x92, 0x3, 0xffffffff, 0xfff, 0x7, 0x2, 0x800, 0x1, 0xeaa, 0xffffffff, 0xe, 0x40, 0x6, 0xffffffff, 0x40, 0x6, 0xaf, 0x3277, 0x1, 0x1, 0x5, 0x4, 0xf, 0xfffffeff, 0x80000000, 0x5e1d8d82, 0x7, 0x4, 0x3ff, 0x4, 0xfff, 0xa2, 0x7, 0x8, 0x6, 0x7], [0x4, 0x0, 0xfffffffe, 0x3e, 0x3, 0x2, 0x9, 0x4, 0x2, 0x400, 0x7fffffff, 0x8d1b, 0x9, 0x200, 0x4, 0x6, 0x7, 0x9, 0x3bc4, 0x0, 0x5c9, 0x2, 0x2, 0x0, 0x7, 0x7, 0x3dd52d93, 0x6, 0x43c4, 0x0, 0xa, 0xb77, 0x1, 0x0, 0x7, 0x5, 0xb, 0x0, 0x8, 0x5ed, 0x10, 0xe49, 0x7, 0x6, 0x400, 0xd6, 0x1, 0x41, 0x1000, 0x9, 0x800, 0x1, 0x3, 0xd, 0x2, 0x1, 0x80, 0x101, 0x400, 0x1, 0x200, 0x3, 0xc000, 0x1], [0x4, 0x4, 0x6, 0x8001, 0x1, 0x0, 0x6, 0x1, 0x9, 0xfffff001, 0xc1, 0x4, 0x7, 0x8, 0x10000, 0x8f80, 0x5, 0x6, 0x2, 0x1, 0x65d793c6, 0x800000, 0xffffffff, 0xdd, 0x0, 0x10, 0x4, 0xf930, 0x80, 0x72, 0x5c, 0x687, 0x7, 0x1000, 0xb43, 0x0, 0xc3b, 0x3596, 0x2, 0x2, 0x0, 0x80, 0x1, 0x2116, 0x1, 0x3e, 0x1, 0x800, 0x6, 0x0, 0xffff55a2, 0x928, 0x0, 0x80000001, 0x400, 0x5, 0x822, 0x2b2, 0x5, 0x5, 0x587, 0x2, 0xff, 0x5]}, 0x45c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r5, r6, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x4, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x7, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) fcntl$notify(r0, 0x402, 0x2) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 1m50.79237501s ago: executing program 3 (id=3709): userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x80000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x48, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="a00064bced2a4a", 0x7, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) 1m50.213738826s ago: executing program 0 (id=3712): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 1m49.675355188s ago: executing program 0 (id=3718): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000c102, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1m49.506206776s ago: executing program 3 (id=3719): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1m48.745047278s ago: executing program 3 (id=3721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fdffffff000000000000318cbd4b0000", @ANYRESDEC=r1, @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x5, 0x31, &(0x7f0000000600)=""/49, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x100) setrlimit(0xb, 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x18, r9, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, 0x0, 0x0, 0x5}]) sendfile(r6, r7, 0x0, 0x20000023896) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m48.430434328s ago: executing program 0 (id=3723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m48.174973067s ago: executing program 0 (id=3725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1m46.589519556s ago: executing program 7 (id=3733): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x20002) pwrite64(r0, &(0x7f00000002c0)="c53011955be5750f38692402675e63a528235261ddfcc549090f9db38db43023172b5f19ba281257fede2edd6a4c3af510729c40c3690f33d3ce", 0x3a, 0x2) 1m46.563131846s ago: executing program 3 (id=3734): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x407, 0x2, 0x108, 0x0, 0x2, 0x207f, 0x10}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = socket(0x10, 0x803, 0x0) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz1\x00', {0x400, 0x36b5, 0x7d0, 0x8}, 0x40, [0x0, 0x7, 0x45d3, 0x7, 0x456, 0x2, 0xffffff34, 0x2, 0x80000001, 0x6, 0x7fffffff, 0x5, 0xf2290d18, 0x3ff, 0xe62, 0x2, 0x5, 0x3, 0x2, 0x2, 0x4, 0x1, 0x4, 0x1000, 0x100, 0x2, 0x6, 0x9, 0x9, 0x80, 0x4, 0x7fffffff, 0xc, 0x4, 0x2, 0x5, 0x49, 0x100, 0x9d, 0x4, 0x6, 0xc, 0x4, 0x40, 0x73, 0x5, 0x7ec, 0xffffffff, 0x1, 0x2, 0xb14d, 0xc8, 0x7fff, 0x8000, 0x53, 0xffffffff, 0x786b, 0xfe000000, 0x176, 0x401, 0x5, 0xb, 0x8], [0x4, 0x10000, 0x0, 0x7, 0xfffffffd, 0x3ff, 0x3, 0x2, 0x100, 0x8, 0x1, 0xa, 0x2, 0x401, 0x4, 0x7, 0x6, 0x4, 0x800, 0x0, 0x7ff, 0x8, 0x80, 0x9, 0x200, 0x1a, 0xd, 0x800, 0x92, 0x3, 0xffffffff, 0xfff, 0x7, 0x2, 0x800, 0x1, 0xeaa, 0xffffffff, 0xe, 0x40, 0x6, 0xffffffff, 0x40, 0x6, 0xaf, 0x3277, 0x1, 0x1, 0x5, 0x4, 0xf, 0xfffffeff, 0x80000000, 0x5e1d8d82, 0x7, 0x4, 0x3ff, 0x4, 0xfff, 0xa2, 0x7, 0x8, 0x6, 0x7], [0x4, 0x0, 0xfffffffe, 0x3e, 0x3, 0x2, 0x9, 0x4, 0x2, 0x400, 0x7fffffff, 0x8d1b, 0x9, 0x200, 0x4, 0x6, 0x7, 0x9, 0x3bc4, 0x0, 0x5c9, 0x2, 0x2, 0x0, 0x7, 0x7, 0x3dd52d93, 0x6, 0x43c4, 0x0, 0xa, 0xb77, 0x1, 0x0, 0x7, 0x5, 0xb, 0x0, 0x8, 0x5ed, 0x10, 0xe49, 0x7, 0x6, 0x400, 0xd6, 0x1, 0x41, 0x1000, 0x9, 0x800, 0x1, 0x3, 0xd, 0x2, 0x1, 0x80, 0x101, 0x400, 0x1, 0x200, 0x3, 0xc000, 0x1], [0x4, 0x4, 0x6, 0x8001, 0x1, 0x0, 0x6, 0x1, 0x9, 0xfffff001, 0xc1, 0x4, 0x7, 0x8, 0x10000, 0x8f80, 0x5, 0x6, 0x2, 0x1, 0x65d793c6, 0x800000, 0xffffffff, 0xdd, 0x0, 0x10, 0x4, 0xf930, 0x80, 0x72, 0x5c, 0x687, 0x7, 0x1000, 0xb43, 0x0, 0xc3b, 0x3596, 0x2, 0x2, 0x0, 0x80, 0x1, 0x2116, 0x1, 0x3e, 0x1, 0x800, 0x6, 0x0, 0xffff55a2, 0x928, 0x0, 0x80000001, 0x400, 0x5, 0x822, 0x2b2, 0x5, 0x5, 0x587, 0x2, 0xff, 0x5]}, 0x45c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r5, r6, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x4, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x7, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) fcntl$notify(r0, 0x402, 0x2) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 1m45.03437952s ago: executing program 7 (id=3738): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 1m44.863270945s ago: executing program 7 (id=3740): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) close(r2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r5, &(0x7f0000001480)=0x2, 0x12) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 1m43.894548876s ago: executing program 7 (id=3742): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d9c26c6789d98feac621054c738dcd81e12d6cd88f9ca0429531b32f76876468253effdaeda1a06b48bddc25f4e2b0575fe2a30c682a714aed74b77d62b3a165438e4c2243ccfbc7090935d6c2a2e93d58d592e7b5a832e499f91aeda0235106a00f7cb9262e15f291af69ab6174ff582c04e21c7cb726c8e86667c8b97e072161507be709abeb7b807e7c9b6815fa4734bb1488891c04a74227bf8f6f42744216452d689376806ef6c540218bbba9401fb9edba3909e10b8cd4069bf3788d583a966fdabd553c7b0fd8039202522ac4c56350e1bee7dc17b7fece6a83898c525faa195ce489d23459d3b45a93c8483eefc2af1700115196f4a738b1d2827112e958280565d39e4790fe603e27ad0ced6b29fbb42b2c1ec55cba3317541e25934ace54d832770cc6c220988987114b761f6c74235c55d316178aea6", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1m43.034710818s ago: executing program 7 (id=3745): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m42.926822955s ago: executing program 7 (id=3746): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r1, 0x1}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1, 0xa3, 0x7400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) preadv(r4, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/14, 0xe}], 0x1, 0x33, 0x519) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b81b010f00d09a81008500baf80c66b8c0991f8c66efbafc0cedf30fc7b20f00ba2000b004ee0f01c26766c7442400000000006766c74424025d4700006766c744240600000000670f011424f3d93b64640f086766c7442400030000006766c7442402b2a600006766c744240600000000670f011424", 0x76}], 0x1, 0x1, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x5, 0x48001, 0x3ff, 0x3, 0x10, "b2496c840d1406b48f0b150b19bb0792137fc7"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="b805000000b9070000000f01c1460f01bd06000000a70f20c035080000000f22c0b9800000c00f3235000100000f300fc79fea810000c4c2f59cd9c483057d7b001566b82b018ec0470f23e6", 0x4c}], 0x1, 0x43, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syncfs(r2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x69, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x0, 0x1, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x6}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x1, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xe, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x1, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x87, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0xa}]}}) 1m32.617696385s ago: executing program 38 (id=3725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1m31.12248171s ago: executing program 39 (id=3734): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x407, 0x2, 0x108, 0x0, 0x2, 0x207f, 0x10}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = socket(0x10, 0x803, 0x0) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz1\x00', {0x400, 0x36b5, 0x7d0, 0x8}, 0x40, [0x0, 0x7, 0x45d3, 0x7, 0x456, 0x2, 0xffffff34, 0x2, 0x80000001, 0x6, 0x7fffffff, 0x5, 0xf2290d18, 0x3ff, 0xe62, 0x2, 0x5, 0x3, 0x2, 0x2, 0x4, 0x1, 0x4, 0x1000, 0x100, 0x2, 0x6, 0x9, 0x9, 0x80, 0x4, 0x7fffffff, 0xc, 0x4, 0x2, 0x5, 0x49, 0x100, 0x9d, 0x4, 0x6, 0xc, 0x4, 0x40, 0x73, 0x5, 0x7ec, 0xffffffff, 0x1, 0x2, 0xb14d, 0xc8, 0x7fff, 0x8000, 0x53, 0xffffffff, 0x786b, 0xfe000000, 0x176, 0x401, 0x5, 0xb, 0x8], [0x4, 0x10000, 0x0, 0x7, 0xfffffffd, 0x3ff, 0x3, 0x2, 0x100, 0x8, 0x1, 0xa, 0x2, 0x401, 0x4, 0x7, 0x6, 0x4, 0x800, 0x0, 0x7ff, 0x8, 0x80, 0x9, 0x200, 0x1a, 0xd, 0x800, 0x92, 0x3, 0xffffffff, 0xfff, 0x7, 0x2, 0x800, 0x1, 0xeaa, 0xffffffff, 0xe, 0x40, 0x6, 0xffffffff, 0x40, 0x6, 0xaf, 0x3277, 0x1, 0x1, 0x5, 0x4, 0xf, 0xfffffeff, 0x80000000, 0x5e1d8d82, 0x7, 0x4, 0x3ff, 0x4, 0xfff, 0xa2, 0x7, 0x8, 0x6, 0x7], [0x4, 0x0, 0xfffffffe, 0x3e, 0x3, 0x2, 0x9, 0x4, 0x2, 0x400, 0x7fffffff, 0x8d1b, 0x9, 0x200, 0x4, 0x6, 0x7, 0x9, 0x3bc4, 0x0, 0x5c9, 0x2, 0x2, 0x0, 0x7, 0x7, 0x3dd52d93, 0x6, 0x43c4, 0x0, 0xa, 0xb77, 0x1, 0x0, 0x7, 0x5, 0xb, 0x0, 0x8, 0x5ed, 0x10, 0xe49, 0x7, 0x6, 0x400, 0xd6, 0x1, 0x41, 0x1000, 0x9, 0x800, 0x1, 0x3, 0xd, 0x2, 0x1, 0x80, 0x101, 0x400, 0x1, 0x200, 0x3, 0xc000, 0x1], [0x4, 0x4, 0x6, 0x8001, 0x1, 0x0, 0x6, 0x1, 0x9, 0xfffff001, 0xc1, 0x4, 0x7, 0x8, 0x10000, 0x8f80, 0x5, 0x6, 0x2, 0x1, 0x65d793c6, 0x800000, 0xffffffff, 0xdd, 0x0, 0x10, 0x4, 0xf930, 0x80, 0x72, 0x5c, 0x687, 0x7, 0x1000, 0xb43, 0x0, 0xc3b, 0x3596, 0x2, 0x2, 0x0, 0x80, 0x1, 0x2116, 0x1, 0x3e, 0x1, 0x800, 0x6, 0x0, 0xffff55a2, 0x928, 0x0, 0x80000001, 0x400, 0x5, 0x822, 0x2b2, 0x5, 0x5, 0x587, 0x2, 0xff, 0x5]}, 0x45c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r5, r6, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x4, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x7, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) fcntl$notify(r0, 0x402, 0x2) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 1m27.638650854s ago: executing program 40 (id=3746): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r1, 0x1}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1, 0xa3, 0x7400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) preadv(r4, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/14, 0xe}], 0x1, 0x33, 0x519) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b81b010f00d09a81008500baf80c66b8c0991f8c66efbafc0cedf30fc7b20f00ba2000b004ee0f01c26766c7442400000000006766c74424025d4700006766c744240600000000670f011424f3d93b64640f086766c7442400030000006766c7442402b2a600006766c744240600000000670f011424", 0x76}], 0x1, 0x1, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x5, 0x48001, 0x3ff, 0x3, 0x10, "b2496c840d1406b48f0b150b19bb0792137fc7"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="b805000000b9070000000f01c1460f01bd06000000a70f20c035080000000f22c0b9800000c00f3235000100000f300fc79fea810000c4c2f59cd9c483057d7b001566b82b018ec0470f23e6", 0x4c}], 0x1, 0x43, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syncfs(r2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x69, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x0, 0x1, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x6}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x1, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xe, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x1, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x87, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0xa}]}}) 5.946374356s ago: executing program 4 (id=4116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x100}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.40570998s ago: executing program 9 (id=4118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.575262728s ago: executing program 9 (id=4123): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x101121) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0x0, 0x4, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x0, 0xa]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x9, 0x5, 0x7, 0xd2, 0x40, 0x3, 0x0, 0x1, 0xb0, 0x6f, 0x8, 0xf0, 0x7f, 0x7, 0x0, 0x7}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_uring_enter(0xffffffffffffffff, 0x2dec, 0x4800, 0x2, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.302860901s ago: executing program 9 (id=4126): socket$inet(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r1 = socket$alg(0x26, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$nl_rdma(0x10, 0x3, 0x14) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.235600526s ago: executing program 6 (id=4127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xd, 0x10}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14) 4.000745484s ago: executing program 9 (id=4130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x103802) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close_range(r0, 0xffffffffffffffff, 0x0) 3.893014012s ago: executing program 9 (id=4131): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, &(0x7f00000003c0)=r3}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)='.\x00', 0x2}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 3.649040488s ago: executing program 9 (id=4133): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0xc6040) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x6, 0x0, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x37303250}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x52, 0x4, 0x1, 0x6, 0xffffffff}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'lblc\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x48c0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x1e0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x3b, @private=0xa010101, 0x4e20, 0x3, 'lblcr\x00', 0xa, 0xa7e, 0x1}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4240, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) syz_io_uring_setup(0x7b44, &(0x7f0000000400)={0x0, 0xf97f, 0x1, 0x5, 0x334}, &(0x7f0000000340), &(0x7f0000000200), &(0x7f00000001c0)) 3.316035013s ago: executing program 5 (id=4135): r0 = io_uring_setup(0x4822, &(0x7f0000000080)={0x0, 0xc8bf, 0x1, 0x2, 0x1000002}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.13325315s ago: executing program 5 (id=4137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x81ff) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) 3.009304892s ago: executing program 5 (id=4139): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 2.950344799s ago: executing program 6 (id=4140): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0xfb, 0x1000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) 2.804621755s ago: executing program 5 (id=4142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.69711532s ago: executing program 4 (id=4144): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.558373398s ago: executing program 5 (id=4145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.397447159s ago: executing program 5 (id=4147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x200000) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r4, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r5, &(0x7f0000002d00), 0x0, 0x0, &(0x7f0000002e00)={0x77359400}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000100)={0x0, 0xe, 0x4, "55dc20f3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.314925582s ago: executing program 4 (id=4148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x103802) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close_range(r0, 0xffffffffffffffff, 0x0) 2.196033705s ago: executing program 4 (id=4149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x81ff) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) 2.013850819s ago: executing program 4 (id=4150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xd, 0x10}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 1.938273541s ago: executing program 6 (id=4151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.108988568s ago: executing program 6 (id=4154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.043966859s ago: executing program 1 (id=4155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 903.096917ms ago: executing program 1 (id=4156): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), 0x0}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)='.\x00', 0x2}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 772.565779ms ago: executing program 1 (id=4157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 686.70132ms ago: executing program 6 (id=4158): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 641.542159ms ago: executing program 4 (id=4159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 530.205355ms ago: executing program 1 (id=4160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x189482) close_range(r0, 0xffffffffffffffff, 0x0) 311.23603ms ago: executing program 1 (id=4161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x81ff) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) 134.329535ms ago: executing program 1 (id=4162): connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r3 = msgget$private(0x0, 0x193) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRES16], 0x401, 0x0) msgrcv(r3, &(0x7f00000002c0), 0x8, 0x0, 0x800) 0s ago: executing program 6 (id=4163): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff1}, {0xffff, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x0, 0x5, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xd, 0xd, 0x3, 0x4, 0x3, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x3c, 0x0, 0x5, 0x8, 0x2a, 0xa, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48a2, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x4040044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000280)="f0ca8b71c71110c2156ceb7869a4fc08d927a364ae0aadd626ee3b6ee4a8435a3fda42b87fef8ab7324fddba7af318c48061ec58634d", 0x36}], 0x2}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x20000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000000006700000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) preadv(r3, 0x0, 0x0, 0x3, 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0xb0, 0x8}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) kernel console output (not intermixed with test programs): m0: Port device team_slave_1 added [ 1058.085057][ T5910] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 1058.259593][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1058.259626][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.259660][ T5910] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1058.259682][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.280405][ T5910] usb 8-1: config 0 descriptor?? [ 1058.512791][ T5803] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1058.796786][ T5910] usbhid 8-1:0.0: can't add hid device: -71 [ 1058.796912][ T5910] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1058.821549][ T5803] usb 10-1: Using ep0 maxpacket: 16 [ 1058.829802][ T5803] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1058.829867][ T5803] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1058.829895][ T5803] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.829925][ T5803] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1058.831148][ T5910] usb 8-1: USB disconnect, device number 32 [ 1058.848872][ T5803] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1058.848900][ T5803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.848919][ T5803] usb 10-1: Product: syz [ 1058.848932][ T5803] usb 10-1: Manufacturer: syz [ 1058.848944][ T5803] usb 10-1: SerialNumber: syz [ 1058.862106][ T5803] usb 10-1: config 0 descriptor?? [ 1059.268767][T15414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.268848][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.268863][T15414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.299754][T15414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.299779][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.299805][T15414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.520360][ T5910] usb 10-1: USB disconnect, device number 21 [ 1059.837124][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.837186][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.641006][ T8150] hsr_slave_0: left promiscuous mode [ 1060.675318][ T8150] hsr_slave_1: left promiscuous mode [ 1060.676329][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.676354][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.329440][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.329458][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.410658][ T8150] veth1_macvtap: left promiscuous mode [ 1061.410774][ T8150] veth0_macvtap: left promiscuous mode [ 1061.411028][ T8150] veth1_vlan: left promiscuous mode [ 1061.411107][ T8150] veth0_vlan: left promiscuous mode [ 1061.905107][ T9921] Bluetooth: hci5: command 0x0406 tx timeout [ 1062.171428][ T8150] team0 (unregistering): Port device team_slave_1 removed [ 1062.205603][ T8150] team0 (unregistering): Port device team_slave_0 removed [ 1062.715940][T15414] hsr_slave_0: entered promiscuous mode [ 1062.735492][T15414] hsr_slave_1: entered promiscuous mode [ 1063.296169][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1063.296195][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1063.754176][ T5867] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1063.935770][ T5867] usb 8-1: Using ep0 maxpacket: 16 [ 1064.320224][ T5867] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1064.320280][ T5867] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1064.320324][ T5867] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.320350][ T5867] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1064.324767][ T5867] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1064.324796][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.324816][ T5867] usb 8-1: Product: syz [ 1064.386396][ T5867] usb 8-1: Manufacturer: syz [ 1064.386417][ T5867] usb 8-1: SerialNumber: syz [ 1064.412430][ T5867] usb 8-1: config 0 descriptor?? [ 1065.020824][ T5867] usb 8-1: USB disconnect, device number 33 [ 1066.405176][ T5803] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1067.502520][ T5803] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1067.502555][ T5803] usb 1-1: config 1 has no interface number 0 [ 1067.502614][ T5803] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1067.502638][ T5803] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1067.502662][ T5803] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 1067.502686][ T5803] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.511981][ T5803] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1067.512011][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.512029][ T5803] usb 1-1: Product: syz [ 1067.512049][ T5803] usb 1-1: Manufacturer: syz [ 1067.512063][ T5803] usb 1-1: SerialNumber: syz [ 1067.527697][T15720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1067.527851][T15720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1067.537323][ T5803] usb 1-1: Error in usbnet_get_endpoints (-22) [ 1067.663340][ T8150] IPVS: stop unused estimator thread 0... [ 1067.814101][ T5803] usb 1-1: USB disconnect, device number 12 [ 1071.778550][T15414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1071.903572][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2809'. [ 1072.189925][T15414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1072.226923][T15797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1072.251245][T15789] veth0_to_bond: left allmulticast mode [ 1072.251273][T15789] veth0_to_bond: left promiscuous mode [ 1072.270875][T15789] bridge1: port 2(veth0_to_bond) entered disabled state [ 1072.699355][T15414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1072.795020][T15414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1073.317993][T15414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.401283][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.446905][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.450168][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.452717][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.452851][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.932694][T15414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.239437][T15414] veth0_vlan: entered promiscuous mode [ 1076.274276][T15414] veth1_vlan: entered promiscuous mode [ 1076.405093][ T5910] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1076.462077][T15414] veth0_macvtap: entered promiscuous mode [ 1076.478716][T15414] veth1_macvtap: entered promiscuous mode [ 1076.506949][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.531285][T15414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.558186][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.558246][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.558279][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.558312][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.565135][ T5910] usb 7-1: Using ep0 maxpacket: 8 [ 1076.567676][ T5910] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.567725][ T5910] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1076.567745][ T5910] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1076.567767][ T5910] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1076.567806][ T5910] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1076.567826][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.615379][ T5910] usbtmc 7-1:16.0: bulk endpoints not found [ 1077.278915][T11942] Bluetooth: hci4: command 0x0406 tx timeout [ 1077.453125][T11306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.453150][T11306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.663131][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2826'. [ 1077.682252][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.682273][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.528418][ T37] audit: type=1326 audit(1775232439.835:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.528477][ T37] audit: type=1326 audit(1775232439.835:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.703822][ T37] audit: type=1326 audit(1775232439.905:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.703878][ T37] audit: type=1326 audit(1775232439.905:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.703919][ T37] audit: type=1326 audit(1775232439.905:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.703957][ T37] audit: type=1326 audit(1775232439.905:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.703996][ T37] audit: type=1326 audit(1775232439.915:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.704034][ T37] audit: type=1326 audit(1775232439.915:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.704072][ T37] audit: type=1326 audit(1775232439.915:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1079.704110][ T37] audit: type=1326 audit(1775232439.915:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15888 comm="syz.9.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed8d4dc819 code=0x7ffc0000 [ 1080.035256][T13547] usb 7-1: USB disconnect, device number 34 [ 1080.822056][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2833'. [ 1081.484970][ T5910] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1081.636487][ T5910] usb 8-1: Using ep0 maxpacket: 16 [ 1081.638967][ T5910] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1081.639092][ T5910] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.639122][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1081.641866][ T5910] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1081.641894][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.641914][ T5910] usb 8-1: Product: syz [ 1081.641928][ T5910] usb 8-1: Manufacturer: syz [ 1081.641941][ T5910] usb 8-1: SerialNumber: syz [ 1081.756293][ T5910] usb 8-1: config 0 descriptor?? [ 1082.956424][ T5910] usb 8-1: USB disconnect, device number 34 [ 1086.272856][T11942] Bluetooth: hci2: command 0x1003 tx timeout [ 1086.274978][ T9921] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1086.717698][T15986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.025208][T13547] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1087.198282][T13547] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1087.198308][T13547] usb 4-1: config 0 has no interface number 0 [ 1087.198368][T13547] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1087.198394][T13547] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1087.198412][T13547] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1087.208735][T13547] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1087.208765][T13547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.208783][T13547] usb 4-1: Product: syz [ 1087.208796][T13547] usb 4-1: Manufacturer: syz [ 1087.208809][T13547] usb 4-1: SerialNumber: syz [ 1087.225648][T13547] usb 4-1: config 0 descriptor?? [ 1087.230643][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1087.243905][T13547] usb 4-1: NFC: Unable to get FW version [ 1087.244287][T13547] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1087.587823][T15999] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 1087.686261][T15999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1087.754889][T15999] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 1087.776932][T15999] vxlan0: entered promiscuous mode [ 1087.803477][T15999] bond1: (slave vxlan0): making interface the new active one [ 1087.804643][T15999] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 1087.808613][ T1211] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.810106][ T1211] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.810541][ T1211] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.810592][ T1211] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.711399][ T5867] usb 4-1: USB disconnect, device number 61 [ 1092.075045][ T5910] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1092.226228][ T5910] usb 10-1: Using ep0 maxpacket: 16 [ 1092.236665][ T5910] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1092.236695][ T5910] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.236721][ T5910] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1092.239463][ T5910] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1092.239492][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.239512][ T5910] usb 10-1: Product: syz [ 1092.239525][ T5910] usb 10-1: Manufacturer: syz [ 1092.239538][ T5910] usb 10-1: SerialNumber: syz [ 1092.260385][ T5910] usb 10-1: config 0 descriptor?? [ 1092.524135][ T5867] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 1093.084346][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1093.084378][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.084416][ T5867] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1093.084439][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.163730][ T5867] usb 8-1: config 0 descriptor?? [ 1093.590447][ T5803] usb 10-1: USB disconnect, device number 22 [ 1093.635043][ T5910] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1093.790466][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 1093.876577][ T5910] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1093.876594][ T5910] usb 1-1: config 0 has no interface number 0 [ 1093.876626][ T5910] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1093.876639][ T5910] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1093.978163][ T5867] aquacomputer_d5next 0003:0C70:F0B6.0021: item fetching failed at offset 4/7 [ 1093.978963][ T5867] aquacomputer_d5next 0003:0C70:F0B6.0021: probe with driver aquacomputer_d5next failed with error -22 [ 1094.027783][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1094.027802][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.027812][ T5910] usb 1-1: Product: syz [ 1094.027819][ T5910] usb 1-1: Manufacturer: syz [ 1094.027827][ T5910] usb 1-1: SerialNumber: syz [ 1094.125407][ T5910] usb 1-1: config 0 descriptor?? [ 1094.126582][T16069] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1094.394169][ T5867] usb 8-1: USB disconnect, device number 35 [ 1094.676670][ T5910] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1094.676942][ T5910] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 1094.737627][ T5910] usb 1-1: USB disconnect, device number 13 [ 1095.050317][T16087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1095.767260][ T5910] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1096.389338][T16103] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1096.414939][ T5910] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1096.414968][ T5910] usb 4-1: config 0 has no interface number 0 [ 1096.415029][ T5910] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1096.415060][ T5910] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1096.415082][ T5910] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1096.526627][ T5910] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1096.526645][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.526656][ T5910] usb 4-1: Product: syz [ 1096.526663][ T5910] usb 4-1: Manufacturer: syz [ 1096.526671][ T5910] usb 4-1: SerialNumber: syz [ 1096.532484][ T5910] usb 4-1: config 0 descriptor?? [ 1096.582583][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1096.582737][ T5910] usb 4-1: NFC: Unable to get FW version [ 1096.613945][ T5910] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1097.127646][T16117] netlink: 'syz.0.2892': attribute type 21 has an invalid length. [ 1097.127673][T16117] IPv6: NLM_F_CREATE should be specified when creating new route [ 1097.144283][T16117] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 1097.665033][T11942] Bluetooth: hci2: command 0x1003 tx timeout [ 1097.665384][ T9921] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1098.774661][ T5803] usb 4-1: USB disconnect, device number 62 [ 1099.145015][ T5844] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1099.301896][ T5844] usb 7-1: Using ep0 maxpacket: 32 [ 1099.303796][ T5844] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1099.303821][ T5844] usb 7-1: config 0 has no interface number 0 [ 1099.303863][ T5844] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1099.303887][ T5844] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1099.348104][ T5844] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1099.348127][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.348137][ T5844] usb 7-1: Product: syz [ 1099.348145][ T5844] usb 7-1: Manufacturer: syz [ 1099.348151][ T5844] usb 7-1: SerialNumber: syz [ 1099.353544][ T5844] usb 7-1: config 0 descriptor?? [ 1099.354313][T16137] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1099.835117][ T5844] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1099.835306][ T5844] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 1099.871912][ T5844] usb 7-1: USB disconnect, device number 35 [ 1101.366072][T16160] netlink: 'syz.7.2901': attribute type 1 has an invalid length. [ 1101.563640][T16163] bond1: (slave gretap1): making interface the new active one [ 1101.605892][T16163] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1102.155067][T11306] Bluetooth: hci2: Frame reassembly failed (-84) [ 1102.395056][ T5803] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1102.565043][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 1102.567709][ T5803] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1102.567743][ T5803] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.567769][ T5803] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1102.567793][ T5803] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1102.567824][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1102.572053][ T5803] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1102.572083][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.572102][ T5803] usb 1-1: Product: syz [ 1102.572115][ T5803] usb 1-1: Manufacturer: syz [ 1102.572128][ T5803] usb 1-1: SerialNumber: syz [ 1102.578157][ T5803] usb 1-1: config 0 descriptor?? [ 1102.579482][T16175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1102.787351][T16175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1102.867383][ T5803] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 1103.101329][ T5803] usb 1-1: USB disconnect, device number 14 [ 1103.101413][ C0] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 1104.145117][T11942] Bluetooth: hci2: command 0x1003 tx timeout [ 1104.145469][ T9921] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1104.276732][T16204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.664938][ T5803] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1106.829922][ T5803] usb 4-1: Using ep0 maxpacket: 16 [ 1106.843804][ T5803] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1106.843941][ T5803] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1106.843969][ T5803] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1106.843993][ T5803] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1106.844017][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1106.846594][ T5803] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1106.846616][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.846627][ T5803] usb 4-1: Product: syz [ 1106.846634][ T5803] usb 4-1: Manufacturer: syz [ 1106.846642][ T5803] usb 4-1: SerialNumber: syz [ 1106.852753][ T5803] usb 4-1: config 0 descriptor?? [ 1106.856920][T16229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1107.105372][T16229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1107.109607][ T5803] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 1107.329132][ T5803] usb 4-1: USB disconnect, device number 63 [ 1107.329235][ C0] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 1110.084966][ T5803] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1110.393501][ T5803] usb 10-1: Using ep0 maxpacket: 16 [ 1110.395472][ T5803] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1110.395489][ T5803] usb 10-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1110.395502][ T5803] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1110.395514][ T5803] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1110.395529][ T5803] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1110.397421][ T5803] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1110.397448][ T5803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.397466][ T5803] usb 10-1: Product: syz [ 1110.397479][ T5803] usb 10-1: Manufacturer: syz [ 1110.397490][ T5803] usb 10-1: SerialNumber: syz [ 1110.404435][ T5803] usb 10-1: config 0 descriptor?? [ 1110.405295][T16264] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1110.612386][T16264] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1110.625343][ T5803] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input21 [ 1110.818609][ T5803] usb 10-1: USB disconnect, device number 23 [ 1112.719037][T16299] QAT: failed to copy from user cfg_data. [ 1112.719700][T16298] netlink: 'syz.7.2943': attribute type 6 has an invalid length. [ 1112.867231][T16299] IPv6: sit1: Disabled Multicast RS [ 1113.768663][T14191] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1113.931369][T14191] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1113.931387][T14191] usb 10-1: config 0 has no interface number 0 [ 1113.931413][T14191] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1113.934755][T14191] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1113.934774][T14191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.934784][T14191] usb 10-1: Product: syz [ 1113.934792][T14191] usb 10-1: Manufacturer: syz [ 1113.934799][T14191] usb 10-1: SerialNumber: syz [ 1114.030551][T14191] usb 10-1: config 0 descriptor?? [ 1114.656968][T14191] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -22 [ 1116.671290][ T5910] usb 10-1: USB disconnect, device number 24 [ 1116.880840][ T5882] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1117.059258][T16368] netlink: 200 bytes leftover after parsing attributes in process `syz.9.2965'. [ 1117.086091][ T5882] usb 8-1: Using ep0 maxpacket: 16 [ 1117.089282][ T5882] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 1117.127705][ T5882] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1117.127724][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.127736][ T5882] usb 8-1: Product: syz [ 1117.127745][ T5882] usb 8-1: Manufacturer: syz [ 1117.127761][ T5882] usb 8-1: SerialNumber: syz [ 1117.146630][ T5882] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1117.146647][ T5882] r8152-cfgselector 8-1: config 0 descriptor?? [ 1117.288775][T16372] loop6: detected capacity change from 0 to 524288000 [ 1118.135076][ T5910] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1118.325012][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 1118.355567][ T5910] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1118.355592][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1118.355606][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 168 [ 1118.355617][ T5910] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.355653][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.355666][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.715666][ T5910] usb 1-1: usb_control_msg returned -32 [ 1118.715698][ T5910] usbtmc 1-1:16.0: can't read capabilities [ 1118.839005][ T5910] usb 1-1: USB disconnect, device number 15 [ 1119.800217][T16379] futex_wake_op: syz.0.2969 tries to shift op by -1; fix this program [ 1120.499838][ T5803] r8152-cfgselector 8-1: USB disconnect, device number 36 [ 1121.271369][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.271427][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.744210][T16395] cgroup: fork rejected by pids controller in /syz3 [ 1122.525017][ T5844] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1122.675001][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 1122.676820][ T5844] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1122.676838][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1122.676850][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 168 [ 1122.676862][ T5844] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.676885][ T5844] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1122.676897][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.135036][ T5844] usb 1-1: usb_control_msg returned -32 [ 1123.135081][ T5844] usbtmc 1-1:16.0: can't read capabilities [ 1123.383889][ T5844] usb 1-1: USB disconnect, device number 16 [ 1123.815069][ T5803] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1124.167475][ T5803] usb 7-1: config index 0 descriptor too short (expected 8192, got 36) [ 1124.167503][ T5803] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.167521][ T5803] usb 7-1: config 0 has no interfaces? [ 1124.167545][ T5803] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1124.167557][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.412173][ T5803] usb 7-1: config 0 descriptor?? [ 1124.441024][T16528] input: syz0 as /devices/virtual/input/input22 [ 1126.342619][ T5910] usb 7-1: USB disconnect, device number 36 [ 1126.469523][ T8150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.953335][T11942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1126.980312][T11942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.983100][T11942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1127.000192][T11942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1127.001103][T11942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1127.122409][T16549] futex_wake_op: syz.9.2989 tries to shift op by -1; fix this program [ 1127.583814][ T8150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.158557][ T8150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.175089][ T5910] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1128.335241][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 1128.341566][ T5910] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1128.341583][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1128.341596][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 168 [ 1128.341608][ T5910] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.341630][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1128.341641][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.566987][ T8150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.627783][ T5910] usb 1-1: usb_control_msg returned -32 [ 1128.627841][ T5910] usbtmc 1-1:16.0: can't read capabilities [ 1128.702795][ T5910] usb 1-1: USB disconnect, device number 17 [ 1129.105203][T11942] Bluetooth: hci1: command tx timeout [ 1129.605084][ T5867] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1129.645406][ T8150] bridge_slave_1: left allmulticast mode [ 1129.645432][ T8150] bridge_slave_1: left promiscuous mode [ 1129.645753][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.757377][ T5867] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1129.757404][ T5867] usb 1-1: config 0 has no interface number 0 [ 1129.757446][ T5867] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1129.760144][ T5867] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1129.760172][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.760190][ T5867] usb 1-1: Product: syz [ 1129.760203][ T5867] usb 1-1: Manufacturer: syz [ 1129.760216][ T5867] usb 1-1: SerialNumber: syz [ 1129.786558][ T8150] bridge_slave_0: left allmulticast mode [ 1129.786586][ T8150] bridge_slave_0: left promiscuous mode [ 1129.786806][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.794232][ T5867] usb 1-1: config 0 descriptor?? [ 1130.424552][ T5867] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 1131.193417][T11942] Bluetooth: hci1: command tx timeout [ 1131.212066][ T8150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.326210][ T8150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.389004][ T8150] bond0 (unregistering): Released all slaves [ 1131.600644][T16554] chnl_net:caif_netlink_parms(): no params data found [ 1132.433989][T14191] usb 1-1: USB disconnect, device number 18 [ 1133.357035][T11942] Bluetooth: hci1: command tx timeout [ 1133.498135][T16613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1134.991081][T16623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1135.109794][ T8150] hsr_slave_0: left promiscuous mode [ 1135.194982][ T8150] hsr_slave_1: left promiscuous mode [ 1135.196176][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.196272][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.285426][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.285455][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.367944][ T8150] veth1_macvtap: left promiscuous mode [ 1135.368048][ T8150] veth0_macvtap: left promiscuous mode [ 1135.368304][ T8150] veth1_vlan: left promiscuous mode [ 1135.368474][ T8150] veth0_vlan: left promiscuous mode [ 1135.425043][T11942] Bluetooth: hci1: command tx timeout [ 1135.459532][T16636] netlink: 'syz.7.3013': attribute type 21 has an invalid length. [ 1135.459556][T16636] IPv6: NLM_F_CREATE should be specified when creating new route [ 1135.459661][T16636] netlink: 'syz.7.3013': attribute type 1 has an invalid length. [ 1138.615864][ T8150] team0 (unregistering): Port device team_slave_1 removed [ 1138.654923][ T8150] team0 (unregistering): Port device team_slave_0 removed [ 1138.959154][T16554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.959274][T16554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.959533][T16554] bridge_slave_0: entered allmulticast mode [ 1138.962035][T16554] bridge_slave_0: entered promiscuous mode [ 1138.993126][T16554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.993246][T16554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.993660][T16554] bridge_slave_1: entered allmulticast mode [ 1139.000744][T16554] bridge_slave_1: entered promiscuous mode [ 1139.268468][T16554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.283501][T16554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.813833][T16554] team0: Port device team_slave_0 added [ 1139.850734][T16554] team0: Port device team_slave_1 added [ 1140.015046][T16554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.015058][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.015072][T16554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.023899][T16554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.023911][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.023925][T16554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.717723][T16554] hsr_slave_0: entered promiscuous mode [ 1140.744013][T16554] hsr_slave_1: entered promiscuous mode [ 1141.165584][T13547] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1141.262277][T16702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.345056][T13547] usb 1-1: device descriptor read/64, error -71 [ 1141.595445][T13547] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1141.725021][T13547] usb 1-1: device descriptor read/64, error -71 [ 1141.835400][T13547] usb usb1-port1: attempt power cycle [ 1142.185090][T13547] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1142.216142][T13547] usb 1-1: device descriptor read/8, error -71 [ 1143.395093][T13547] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1143.416463][T13547] usb 1-1: device descriptor read/8, error -71 [ 1143.525646][T13547] usb usb1-port1: unable to enumerate USB device [ 1145.454767][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 1147.266740][T16554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1147.422823][T16554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1147.541763][T16554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1147.606495][T16554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1147.988896][ T5910] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1148.934979][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 1148.937482][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.937506][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1148.941850][ T5910] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1148.941882][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.941901][ T5910] usb 7-1: Product: syz [ 1148.941915][ T5910] usb 7-1: Manufacturer: syz [ 1148.941928][ T5910] usb 7-1: SerialNumber: syz [ 1148.961345][ T5910] usb 7-1: config 0 descriptor?? [ 1149.143633][T16554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.185695][ T5882] usb 7-1: USB disconnect, device number 37 [ 1149.462533][T16554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.556350][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.556493][T11306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.636633][T16789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1149.693585][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.696570][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.235161][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3045'. [ 1152.400055][T16554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.637277][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3052'. [ 1152.710667][T16554] veth0_vlan: entered promiscuous mode [ 1152.755297][T16554] veth1_vlan: entered promiscuous mode [ 1153.094060][T16554] veth0_macvtap: entered promiscuous mode [ 1153.110662][T16554] veth1_macvtap: entered promiscuous mode [ 1153.259070][T16554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.454101][T16554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.341941][ T862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.347417][ T862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.348345][ T862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.348616][ T862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.328415][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3057'. [ 1156.075049][ T862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.075070][ T862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.244463][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.244484][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.041907][T16894] syzkaller1: entered promiscuous mode [ 1158.041930][T16894] syzkaller1: entered allmulticast mode [ 1158.791237][T16909] netlink: 'syz.3.3067': attribute type 21 has an invalid length. [ 1158.791258][T16909] IPv6: NLM_F_CREATE should be specified when creating new route [ 1158.791362][T16909] netlink: 'syz.3.3067': attribute type 1 has an invalid length. [ 1160.189099][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3069'. [ 1161.330458][T16927] futex_wake_op: syz.3.3070 tries to shift op by -1; fix this program [ 1162.921082][T16946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.206100][T14191] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1163.435442][T14191] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1163.435460][T14191] usb 4-1: config 0 has no interface number 0 [ 1163.435487][T14191] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1163.435501][T14191] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1163.435512][T14191] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1163.488381][T14191] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1163.488410][T14191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.488429][T14191] usb 4-1: Product: syz [ 1163.488442][T14191] usb 4-1: Manufacturer: syz [ 1163.488455][T14191] usb 4-1: SerialNumber: syz [ 1163.497707][T14191] usb 4-1: config 0 descriptor?? [ 1163.505045][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1163.520000][T14191] usb 4-1: NFC: Unable to get FW version [ 1163.520604][T14191] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1163.910904][T16956] futex_wake_op: syz.9.3079 tries to shift op by -1; fix this program [ 1165.361623][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3082'. [ 1167.476629][ T5910] usb 4-1: USB disconnect, device number 64 [ 1168.090261][T16997] futex_wake_op: syz.0.3087 tries to shift op by -1; fix this program [ 1170.675589][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'. [ 1174.861889][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 1175.674527][T17064] futex_wake_op: syz.0.3104 tries to shift op by -1; fix this program [ 1178.642639][T17129] libceph: resolve '0..' (ret=-3): failed [ 1178.650345][T17129] netlink: 'syz.9.3122': attribute type 11 has an invalid length. [ 1179.579354][T17146] futex_wake_op: syz.6.3130 tries to shift op by -1; fix this program [ 1181.895510][T17184] futex_wake_op: syz.6.3140 tries to shift op by -1; fix this program [ 1182.709887][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.709955][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.768938][T17195] futex_wake_op: syz.7.3141 tries to shift op by -1; fix this program [ 1183.196609][T17200] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1186.620594][T17266] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1188.901253][T17291] futex_wake_op: syz.9.3172 tries to shift op by -1; fix this program [ 1190.946509][T17328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1191.382150][T17337] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1192.444953][T15465] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1192.575014][T15465] usb 10-1: device descriptor read/64, error -71 [ 1192.634223][T17348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.634493][T17348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.637493][T17348] bridge0: entered allmulticast mode [ 1192.815024][T15465] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1193.000304][T15465] usb 10-1: device descriptor read/64, error -71 [ 1193.106720][T15465] usb usb10-port1: attempt power cycle [ 1193.484930][T15465] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1193.547621][T15465] usb 10-1: device descriptor read/8, error -71 [ 1194.004988][T15465] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1194.931212][T17368] futex_wake_op: syz.7.3198 tries to shift op by -1; fix this program [ 1195.567485][T17379] fuse: Unknown parameter 'user_i00000000000000000000' [ 1197.133845][T15465] usb 10-1: device descriptor read/8, error -71 [ 1197.237998][T15465] usb usb10-port1: unable to enumerate USB device [ 1198.132994][T17412] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1199.676039][T17427] fuse: Unknown parameter 'user_i00000000000000000000' [ 1199.758048][T17426] futex_wake_op: syz.6.3211 tries to shift op by -1; fix this program [ 1200.411242][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.412472][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.448052][T17434] bridge0: entered allmulticast mode [ 1200.718620][T17437] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1201.265230][ T5803] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1201.455199][ T5803] usb 8-1: device descriptor read/64, error -71 [ 1201.744989][ T5803] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 1201.894969][ T5803] usb 8-1: device descriptor read/64, error -71 [ 1202.005257][ T5803] usb usb8-port1: attempt power cycle [ 1202.239728][T17462] fuse: Unknown parameter 'user_i00000000000000000000' [ 1202.365000][ T5803] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 1202.409612][ T5803] usb 8-1: device descriptor read/8, error -71 [ 1202.555214][T17463] futex_wake_op: syz.3.3223 tries to shift op by -1; fix this program [ 1202.645079][ T5803] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 1202.924613][ T5803] usb 8-1: device descriptor read/8, error -71 [ 1203.027418][ T5803] usb usb8-port1: unable to enumerate USB device [ 1204.273818][T17491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1204.550589][T17481] kvm: pic: level sensitive irq not supported [ 1204.550760][T17481] kvm: pic: non byte read [ 1205.071094][T17497] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.071109][T17497] binder: 17493:17497 ioctl 4018620d 200000004a80 returned -16 [ 1206.802517][T17512] fuse: Unknown parameter 'user_id00000000000000000000' [ 1208.039770][T17522] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1208.444984][T14191] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1208.589122][T17528] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3242' sets config #0 [ 1208.589701][T17528] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3242' sets config #1 [ 1208.734940][T14191] usb 4-1: device descriptor read/64, error -71 [ 1209.005015][T14191] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1209.164945][T14191] usb 4-1: device descriptor read/64, error -71 [ 1209.291735][T14191] usb usb4-port1: attempt power cycle [ 1209.635420][T14191] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1209.704494][T14191] usb 4-1: device descriptor read/8, error -71 [ 1209.955170][T14191] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1209.991753][T14191] usb 4-1: device descriptor read/8, error -71 [ 1210.062229][T17543] futex_wake_op: syz.9.3245 tries to shift op by -1; fix this program [ 1210.115137][T14191] usb usb4-port1: unable to enumerate USB device [ 1211.092559][T17558] fuse: Unknown parameter 'user_id00000000000000000000' [ 1212.613819][T17578] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1212.701404][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3257'. [ 1213.255001][T14191] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1213.375176][T17590] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1213.426293][T14191] usb 7-1: device descriptor read/64, error -71 [ 1213.724986][T14191] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1214.171745][T14191] usb 7-1: device descriptor read/64, error -71 [ 1214.300899][T14191] usb usb7-port1: attempt power cycle [ 1214.724985][T14191] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1214.800919][T14191] usb 7-1: device descriptor read/8, error -71 [ 1215.044943][T14191] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1215.083956][T14191] usb 7-1: device descriptor read/8, error -71 [ 1215.208216][T14191] usb usb7-port1: unable to enumerate USB device [ 1215.660788][T17600] input: syz0 as /devices/virtual/input/input25 [ 1216.016695][T17602] fuse: Unknown parameter 'user_id00000000000000000000' [ 1216.405091][T14191] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1216.567856][T14191] usb 10-1: Using ep0 maxpacket: 8 [ 1216.581365][T14191] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1216.581388][T14191] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1216.581399][T14191] usb 10-1: Product: syz [ 1216.581406][T14191] usb 10-1: Manufacturer: syz [ 1216.581413][T14191] usb 10-1: SerialNumber: syz [ 1216.622585][T14191] usb 10-1: config 0 descriptor?? [ 1216.866954][T14191] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1217.171230][T17616] futex_wake_op: syz.3.3269 tries to shift op by -1; fix this program [ 1217.404951][T14191] gspca_zc3xx: reg_w_i err -110 [ 1217.405056][T14191] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1218.150462][T17619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.151290][T17619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.722934][T17634] input: syz0 as /devices/virtual/input/input26 [ 1219.390695][T17645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1219.713293][T17648] fuse: Bad value for 'fd' [ 1221.107655][ T5844] usb 10-1: USB disconnect, device number 29 [ 1222.295254][T17672] blktrace: Concurrent blktraces are not allowed on loop4 [ 1222.297168][T17672] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1222.614993][ T5844] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1222.745003][ T5844] usb 4-1: device descriptor read/64, error -71 [ 1223.185002][ T5844] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1223.335021][ T5844] usb 4-1: device descriptor read/64, error -71 [ 1223.445375][ T5844] usb usb4-port1: attempt power cycle [ 1223.720091][T17686] futex_wake_op: syz.6.3287 tries to shift op by -1; fix this program [ 1223.784974][ T5844] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1223.849381][ T5844] usb 4-1: device descriptor read/8, error -71 [ 1224.284995][ T5844] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1224.319521][ T5844] usb 4-1: device descriptor read/8, error -71 [ 1224.436661][ T5844] usb usb4-port1: unable to enumerate USB device [ 1225.365313][T17703] fuse: Bad value for 'fd' [ 1226.419957][T17712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1228.678609][T17748] fuse: Bad value for 'fd' [ 1228.842629][T17754] blktrace: Concurrent blktraces are not allowed on loop4 [ 1228.917284][T17754] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1229.556005][T17757] futex_wake_op: syz.9.3306 tries to shift op by -1; fix this program [ 1233.041430][T17798] fuse: Unknown parameter '0x0000000000000003' [ 1236.812810][T17844] fuse: Unknown parameter '0x0000000000000003' [ 1237.593843][T17870] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1237.954999][ T5844] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1238.085014][ T5844] usb 7-1: device descriptor read/64, error -71 [ 1238.325971][ T5844] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1238.467892][ T5844] usb 7-1: device descriptor read/64, error -71 [ 1238.575461][ T5844] usb usb7-port1: attempt power cycle [ 1238.925023][ T5844] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1238.947735][ T5844] usb 7-1: device descriptor read/8, error -71 [ 1239.195081][ T5844] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1239.217635][ T5844] usb 7-1: device descriptor read/8, error -71 [ 1239.326154][ T5844] usb usb7-port1: unable to enumerate USB device [ 1239.728176][T17890] hub 1-0:1.0: USB hub found [ 1239.757135][T17890] hub 1-0:1.0: 1 port detected [ 1240.855807][T17901] fuse: Unknown parameter '0x0000000000000003' [ 1241.585381][ T5803] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1241.869850][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 1241.872382][ T5803] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1241.872408][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.872426][ T5803] usb 1-1: config 0 has no interface number 0 [ 1241.921134][ T5803] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1241.921153][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.921162][ T5803] usb 1-1: Product: syz [ 1241.921169][ T5803] usb 1-1: Manufacturer: syz [ 1241.921176][ T5803] usb 1-1: SerialNumber: syz [ 1241.967877][ T5803] usb 1-1: config 0 descriptor?? [ 1242.011831][ T5803] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1242.011852][ T5803] uvcvideo 1-1:0.31: No valid video chain found. [ 1243.966806][T17943] fuse: Unknown parameter '0x0000000000000003' [ 1244.153419][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.153489][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.530531][T17954] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1244.743631][ T5910] usb 1-1: USB disconnect, device number 23 [ 1244.885368][ T5803] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1245.024996][ T5803] usb 4-1: device descriptor read/64, error -71 [ 1245.285896][ T5803] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1245.445130][ T5803] usb 4-1: device descriptor read/64, error -71 [ 1245.565512][ T5803] usb usb4-port1: attempt power cycle [ 1245.640962][T17979] Device name cannot be null; rc = [-22] [ 1245.915169][ T5803] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1245.936295][ T5803] usb 4-1: device descriptor read/8, error -71 [ 1246.018313][T17981] fuse: Unknown parameter '0x0000000000000003' [ 1246.185214][ T5803] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1246.230246][ T5803] usb 4-1: device descriptor read/8, error -71 [ 1246.335492][ T5803] usb usb4-port1: unable to enumerate USB device [ 1248.067653][ T5803] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1248.274971][ T5803] usb 7-1: Using ep0 maxpacket: 8 [ 1248.282529][ T5803] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1248.306667][ T5803] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.306696][ T5803] usb 7-1: config 0 has no interface number 0 [ 1248.309598][ T5803] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1248.309627][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.309646][ T5803] usb 7-1: Product: syz [ 1248.309658][ T5803] usb 7-1: Manufacturer: syz [ 1248.309670][ T5803] usb 7-1: SerialNumber: syz [ 1248.385452][ T5803] usb 7-1: config 0 descriptor?? [ 1248.406905][ T5803] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1248.406936][ T5803] uvcvideo 7-1:0.31: No valid video chain found. [ 1249.225320][T18016] fuse: Unknown parameter '0x0000000000000003' [ 1250.855686][T18033] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1251.325307][T15465] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1251.352610][T11942] Bluetooth: hci1: command 0x0406 tx timeout [ 1251.407820][ T5803] usb 7-1: USB disconnect, device number 46 [ 1251.465012][T15465] usb 4-1: device descriptor read/64, error -71 [ 1251.705035][T15465] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1251.835013][T15465] usb 4-1: device descriptor read/64, error -71 [ 1251.945424][T15465] usb usb4-port1: attempt power cycle [ 1252.284972][T15465] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1252.306829][T15465] usb 4-1: device descriptor read/8, error -71 [ 1252.403969][T18055] fuse: Unknown parameter 'fd0x0000000000000003' [ 1252.547083][T15465] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1252.566616][T15465] usb 4-1: device descriptor read/8, error -71 [ 1252.683167][T15465] usb usb4-port1: unable to enumerate USB device [ 1253.214948][ T5882] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1253.368245][ T5882] usb 10-1: Using ep0 maxpacket: 8 [ 1253.370328][ T5882] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1253.370344][ T5882] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.370354][ T5882] usb 10-1: config 0 has no interface number 0 [ 1253.372104][ T5882] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1253.372120][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.372130][ T5882] usb 10-1: Product: syz [ 1253.372137][ T5882] usb 10-1: Manufacturer: syz [ 1253.372145][ T5882] usb 10-1: SerialNumber: syz [ 1253.390514][ T5882] usb 10-1: config 0 descriptor?? [ 1253.400709][ T5882] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1253.400741][ T5882] uvcvideo 10-1:0.31: No valid video chain found. [ 1253.595885][ T5882] usb 10-1: USB disconnect, device number 30 [ 1254.816467][T18090] fuse: Unknown parameter 'fd0x0000000000000003' [ 1258.301141][T18133] fuse: Unknown parameter 'fd0x0000000000000003' [ 1258.566976][T18134] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1258.956848][ T5844] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1259.085082][ T5844] usb 4-1: device descriptor read/64, error -71 [ 1259.354971][ T5844] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1259.485332][ T5844] usb 4-1: device descriptor read/64, error -71 [ 1259.595196][ T5844] usb usb4-port1: attempt power cycle [ 1259.935134][ T5844] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1259.955850][ T5844] usb 4-1: device descriptor read/8, error -71 [ 1260.197619][ T5844] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1260.215831][ T5844] usb 4-1: device descriptor read/8, error -71 [ 1260.337731][ T5844] usb usb4-port1: unable to enumerate USB device [ 1262.041229][T18180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.454982][ T5803] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1262.798284][ T5803] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1262.798313][ T5803] usb 4-1: config 0 has no interface number 0 [ 1262.798356][ T5803] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1262.798382][ T5803] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1262.798403][ T5803] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1262.842296][ T5803] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1262.842316][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.842326][ T5803] usb 4-1: Product: syz [ 1262.842333][ T5803] usb 4-1: Manufacturer: syz [ 1262.842340][ T5803] usb 4-1: SerialNumber: syz [ 1262.882351][ T5803] usb 4-1: config 0 descriptor?? [ 1262.898058][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1262.906915][ T5803] usb 4-1: NFC: Unable to get FW version [ 1262.907518][ T5803] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1264.685453][T18217] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1265.095076][ T5803] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1265.246423][ T5803] usb 1-1: device descriptor read/64, error -71 [ 1265.507798][ T5803] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1265.660796][ T5803] usb 1-1: device descriptor read/64, error -71 [ 1265.769632][ T5803] usb usb1-port1: attempt power cycle [ 1265.955762][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3446'. [ 1266.165069][ T5803] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1266.187865][ T5803] usb 1-1: device descriptor read/8, error -71 [ 1266.216620][ T5910] usb 4-1: USB disconnect, device number 85 [ 1266.435092][ T5803] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1266.480043][ T5803] usb 1-1: device descriptor read/8, error -71 [ 1266.585543][ T5803] usb usb1-port1: unable to enumerate USB device [ 1267.019718][T18252] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1272.718122][T18297] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1273.095145][ T5910] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1273.235197][ T5910] usb 8-1: device descriptor read/64, error -71 [ 1273.484945][ T5910] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 1273.616080][ T5910] usb 8-1: device descriptor read/64, error -71 [ 1273.681744][T18318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1273.738263][ T5910] usb usb8-port1: attempt power cycle [ 1274.104949][ T5910] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1274.136158][ T5910] usb 8-1: device descriptor read/8, error -71 [ 1274.385189][ T5910] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1274.426402][ T5910] usb 8-1: device descriptor read/8, error -71 [ 1274.547903][ T5910] usb usb8-port1: unable to enumerate USB device [ 1277.000286][T18333] futex_wake_op: syz.6.3481 tries to shift op by -1; fix this program [ 1278.146929][T18368] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1278.745022][ T5867] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1278.801304][T18371] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1278.894984][ T5867] usb 10-1: device descriptor read/64, error -71 [ 1279.134959][ T5867] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1279.201035][T18373] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1279.201053][T18373] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1279.265049][ T5867] usb 10-1: device descriptor read/64, error -71 [ 1279.311837][T18373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1279.311859][T18373] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1279.375395][ T5867] usb usb10-port1: attempt power cycle [ 1279.724994][ T5867] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1279.746194][ T5867] usb 10-1: device descriptor read/8, error -71 [ 1279.995047][ T5867] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 1280.016097][ T5867] usb 10-1: device descriptor read/8, error -71 [ 1280.125343][ T5867] usb usb10-port1: unable to enumerate USB device [ 1280.770776][T18373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1280.770799][T18373] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1281.459328][T18401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3506'. [ 1282.925982][T18430] futex_wake_op: syz.7.3505 tries to shift op by -1; fix this program [ 1283.148542][T18437] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3518'. [ 1283.406421][T18444] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1283.775866][ T5882] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1283.915023][ T5882] usb 4-1: device descriptor read/64, error -71 [ 1284.225037][ T5882] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1284.355107][ T5882] usb 4-1: device descriptor read/64, error -71 [ 1284.471032][ T5882] usb usb4-port1: attempt power cycle [ 1284.815255][ T5882] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1284.842366][ T5882] usb 4-1: device descriptor read/8, error -71 [ 1285.084989][ T5882] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1285.126342][ T5882] usb 4-1: device descriptor read/8, error -71 [ 1285.179010][T18464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.244234][ T5882] usb usb4-port1: unable to enumerate USB device [ 1285.437840][T18470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3530'. [ 1285.638183][T18473] Driver unsupported XDP return value 0 on prog (id 137) dev N/A, expect packet loss! [ 1287.345180][T18493] futex_wake_op: syz.0.3539 tries to shift op by -1; fix this program [ 1287.684383][T18502] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3542'. [ 1288.256897][T18520] fuse: Bad value for 'fd' [ 1289.761689][T18537] binder: 18536:18537 ioctl c0306201 2000000000c0 returned -14 [ 1290.489533][T18554] fuse: Bad value for 'fd' [ 1291.105039][ T5910] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1291.255206][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 1291.263241][ T5910] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.263293][ T5910] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1291.263317][ T5910] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1291.263340][ T5910] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1291.327484][ T5910] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1291.327514][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.327533][ T5910] usb 1-1: Product: syz [ 1291.327546][ T5910] usb 1-1: Manufacturer: syz [ 1291.327560][ T5910] usb 1-1: SerialNumber: syz [ 1291.404732][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1291.518323][ T5910] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input27 [ 1291.675092][ T5910] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1291.675111][ T5910] (id 0x00) [ 1291.873386][T18587] fuse: Bad value for 'fd' [ 1291.884966][ T5910] rc_core: IR keymap rc-imon-pad not found [ 1291.884985][ T5910] Registered IR keymap rc-empty [ 1291.885077][ T5910] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1291.885094][ T5910] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1291.911876][T18589] fuse: Bad value for 'fd' [ 1291.918087][ T5910] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1291.921125][ T5910] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input28 [ 1292.098679][ T5910] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:28> initialized [ 1292.196358][ T5910] usb 1-1: USB disconnect, device number 28 [ 1293.127130][T18600] mkiss: ax0: crc mode is auto. [ 1294.720653][T18632] fuse: Bad value for 'fd' [ 1296.228667][T11942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.234772][T11942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.261399][T11942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1296.291678][T11942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1296.294748][T11942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1296.339158][ T9921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.345257][ T9921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.347573][ T9921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1296.348194][ T9921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1296.348625][ T9921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.178532][T18675] kvm: pic: level sensitive irq not supported [ 1297.178581][T18675] kvm: pic: non byte read [ 1297.178682][T18675] kvm: pic: level sensitive irq not supported [ 1297.178718][T18675] kvm: pic: non byte read [ 1297.394523][T18662] hub 1-0:1.0: USB hub found [ 1297.397423][T18662] hub 1-0:1.0: 1 port detected [ 1298.782068][ T4497] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.105680][ T9921] Bluetooth: hci2: command tx timeout [ 1299.744526][ T4497] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.872968][T18714] loop5: detected capacity change from 0 to 7 [ 1299.892354][T18714] Dev loop5: unable to read RDB block 7 [ 1299.892394][T18714] loop5: unable to read partition table [ 1299.892572][T18714] loop5: partition table beyond EOD, truncated [ 1299.892592][T18714] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1300.445875][ T4497] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.185105][ T9921] Bluetooth: hci2: command tx timeout [ 1302.039648][ T4497] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.213542][T18656] chnl_net:caif_netlink_parms(): no params data found [ 1302.546080][T18656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.546241][T18656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.546440][T18656] bridge_slave_0: entered allmulticast mode [ 1302.548969][T18656] bridge_slave_0: entered promiscuous mode [ 1302.552083][T18656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.552236][T18656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.552409][T18656] bridge_slave_1: entered allmulticast mode [ 1302.554512][T18656] bridge_slave_1: entered promiscuous mode [ 1302.596941][T18656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.600854][T18656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.661633][T18656] team0: Port device team_slave_0 added [ 1302.666823][T18656] team0: Port device team_slave_1 added [ 1302.817574][T18656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.817586][T18656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.817600][T18656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.903626][T18656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.903637][T18656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.903652][T18656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.119709][T18656] hsr_slave_0: entered promiscuous mode [ 1303.122968][T18656] hsr_slave_1: entered promiscuous mode [ 1303.137153][T18656] debugfs: 'hsr0' already exists in 'hsr' [ 1303.137181][T18656] Cannot create hsr debugfs directory [ 1303.265179][ T9921] Bluetooth: hci2: command tx timeout [ 1303.289650][ T4497] bridge_slave_1: left allmulticast mode [ 1303.289677][ T4497] bridge_slave_1: left promiscuous mode [ 1303.290010][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.699204][ T4497] bridge_slave_0: left allmulticast mode [ 1303.699233][ T4497] bridge_slave_0: left promiscuous mode [ 1303.699471][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.345133][ T9921] Bluetooth: hci2: command tx timeout [ 1305.636876][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.636953][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.939559][T18824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.434971][ T5910] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 1307.588069][ T5910] usb 10-1: config 0 has an invalid interface number: 113 but max is 0 [ 1307.588086][ T5910] usb 10-1: config 0 has no interface number 0 [ 1307.588110][ T5910] usb 10-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1307.588124][ T5910] usb 10-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1307.588136][ T5910] usb 10-1: config 0 interface 113 has no altsetting 0 [ 1307.591502][ T5910] usb 10-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1307.591532][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.591549][ T5910] usb 10-1: Product: syz [ 1307.591561][ T5910] usb 10-1: Manufacturer: syz [ 1307.591572][ T5910] usb 10-1: SerialNumber: syz [ 1307.600602][ T5910] usb 10-1: config 0 descriptor?? [ 1307.640684][T18833] futex_wake_op: syz.3.3654 tries to shift op by -1; fix this program [ 1307.738269][ C0] usb 10-1: NFC: Urb failure (status -71) [ 1307.738423][ T5910] usb 10-1: NFC: Unable to get FW version [ 1307.739014][ T5910] pn533_usb 10-1:0.113: probe with driver pn533_usb failed with error -90 [ 1308.352716][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.456809][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.523617][ T4497] bond0 (unregistering): Released all slaves [ 1308.550166][ T4497] bond1 (unregistering): Released all slaves [ 1309.137394][ T4497] !: left promiscuous mode [ 1310.688007][T18858] hub 1-0:1.0: USB hub found [ 1310.692943][T18858] hub 1-0:1.0: 1 port detected [ 1311.558691][T15465] usb 10-1: USB disconnect, device number 35 [ 1312.035100][ T4497] hsr_slave_0: left promiscuous mode [ 1312.098782][ T4497] hsr_slave_1: left promiscuous mode [ 1312.099810][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.099833][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.199381][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.199409][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.446206][ T4497] veth1_macvtap: left promiscuous mode [ 1312.446308][ T4497] veth0_macvtap: left promiscuous mode [ 1312.446603][ T4497] veth1_vlan: left promiscuous mode [ 1312.446774][ T4497] veth0_vlan: left promiscuous mode [ 1313.434685][T18890] futex_wake_op: syz.9.3669 tries to shift op by -1; fix this program [ 1314.863663][ T4497] team0 (unregistering): Port device team_slave_1 removed [ 1314.938697][ T4497] team0 (unregistering): Port device team_slave_0 removed [ 1315.539040][ T5910] IPVS: starting estimator thread 0... [ 1315.568818][T18908] hub 1-0:1.0: USB hub found [ 1315.569199][T18908] hub 1-0:1.0: 1 port detected [ 1315.635009][T18913] IPVS: using max 11 ests per chain, 26400 per kthread [ 1316.408329][T18925] fuse: Bad value for 'fd' [ 1317.674727][T18656] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1317.776331][T18656] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1317.900848][T18656] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1317.990989][T18656] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1318.246632][ T4497] IPVS: stop unused estimator thread 0... [ 1318.827816][T18656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.953555][T18656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.047102][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.053032][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.115926][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.131680][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.160852][T18973] fuse: Bad value for 'fd' [ 1319.276775][ T5867] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1319.325005][ T5844] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1319.427797][ T5867] usb 8-1: Using ep0 maxpacket: 8 [ 1319.429358][ T5867] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1319.429374][ T5867] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.429384][ T5867] usb 8-1: config 0 has no interface number 0 [ 1319.431369][ T5867] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1319.431385][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.431396][ T5867] usb 8-1: Product: syz [ 1319.431403][ T5867] usb 8-1: Manufacturer: syz [ 1319.431410][ T5867] usb 8-1: SerialNumber: syz [ 1319.434571][ T5867] usb 8-1: config 0 descriptor?? [ 1319.457551][ T5867] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1319.457585][ T5867] uvcvideo 8-1:0.31: No valid video chain found. [ 1319.475304][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 1319.477967][ T5844] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1319.480794][ T5844] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1319.480823][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.480842][ T5844] usb 1-1: Product: syz [ 1319.480856][ T5844] usb 1-1: Manufacturer: syz [ 1319.480869][ T5844] usb 1-1: SerialNumber: syz [ 1319.529193][ T5844] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1319.529219][ T5844] r8152-cfgselector 1-1: config 0 descriptor?? [ 1320.030960][T18656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.258955][T18992] r8152-cfgselector 1-1: USB disconnect, device number 29 [ 1320.737398][T18995] hub 1-0:1.0: USB hub found [ 1320.737689][T18995] hub 1-0:1.0: 1 port detected [ 1320.945073][ T5844] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1321.407253][T18656] veth0_vlan: entered promiscuous mode [ 1321.461346][T18656] veth1_vlan: entered promiscuous mode [ 1321.809689][T18656] veth0_macvtap: entered promiscuous mode [ 1321.953622][T18656] veth1_macvtap: entered promiscuous mode [ 1322.187535][T18656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.258771][T18656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.309261][ T4497] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.313820][ T4497] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.340221][ T4497] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.374377][ T1321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.576059][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.576080][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.606743][ T5872] usb 8-1: USB disconnect, device number 45 [ 1323.892725][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.892747][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.385052][T19024] mkiss: ax0: crc mode is auto. [ 1325.452404][T19026] fuse: Bad value for 'fd' [ 1325.974997][T13547] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1326.071708][T19039] netlink: 'syz.3.3706': attribute type 21 has an invalid length. [ 1326.071914][T19039] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 1326.137531][T13547] usb 7-1: Using ep0 maxpacket: 8 [ 1326.139567][T13547] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1326.139584][T13547] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.139593][T13547] usb 7-1: config 0 has no interface number 0 [ 1326.141717][T13547] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1326.141742][T13547] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.141752][T13547] usb 7-1: Product: syz [ 1326.141760][T13547] usb 7-1: Manufacturer: syz [ 1326.141767][T13547] usb 7-1: SerialNumber: syz [ 1326.219688][T13547] usb 7-1: config 0 descriptor?? [ 1326.255259][T13547] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1326.255280][T13547] uvcvideo 7-1:0.31: No valid video chain found. [ 1327.862977][T13547] usb 7-1: USB disconnect, device number 47 [ 1328.135098][T18998] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1328.294933][T18998] usb 10-1: Using ep0 maxpacket: 16 [ 1328.296973][T18998] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 1328.329476][T18998] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1328.329494][T18998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.329504][T18998] usb 10-1: Product: syz [ 1328.329512][T18998] usb 10-1: Manufacturer: syz [ 1328.329519][T18998] usb 10-1: SerialNumber: syz [ 1328.376167][T18998] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1328.376184][T18998] r8152-cfgselector 10-1: config 0 descriptor?? [ 1328.569641][T19076] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1328.638218][T19078] netlink: 'syz.6.3720': attribute type 21 has an invalid length. [ 1328.638237][T19078] IPv6: NLM_F_CREATE should be specified when creating new route [ 1328.638309][T19078] netlink: 'syz.6.3720': attribute type 1 has an invalid length. [ 1328.709280][T19076] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1329.942457][T19100] syzkaller0: entered promiscuous mode [ 1329.942493][T19100] syzkaller0: entered allmulticast mode [ 1331.298660][ T5872] r8152-cfgselector 10-1: USB disconnect, device number 36 [ 1331.329083][T19119] netlink: 'syz.3.3734': attribute type 21 has an invalid length. [ 1331.329189][T19119] netlink: 'syz.3.3734': attribute type 1 has an invalid length. [ 1331.548040][T13547] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1331.716544][T13547] usb 8-1: Using ep0 maxpacket: 32 [ 1331.768397][T13547] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1331.768418][T13547] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.768428][T13547] usb 8-1: Product: syz [ 1331.768435][T13547] usb 8-1: Manufacturer: syz [ 1331.768442][T13547] usb 8-1: SerialNumber: syz [ 1331.772127][T13547] usb 8-1: config 0 descriptor?? [ 1331.812970][T13547] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1331.813504][T13547] dvb-usb: bulk message failed: -22 (4/0) [ 1331.813523][T13547] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1331.813645][T13547] dvb-usb: bulk message failed: -22 (5/0) [ 1331.813658][T13547] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1332.052031][T13547] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1332.068543][T13547] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1332.068644][T13547] usb 8-1: media controller created [ 1332.138954][T13547] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1332.240408][T13547] usb 8-1: selecting invalid altsetting 3 [ 1332.240429][T13547] ttusb2: set interface to alts=3 failed [ 1332.402425][T13547] DVB: Unable to find symbol tda10086_attach() [ 1332.402447][T13547] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1332.412319][T13547] dvb-usb: bulk message failed: -22 (4/0) [ 1332.412341][T13547] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1332.412462][T13547] dvb-usb: bulk message failed: -22 (5/0) [ 1332.412481][T13547] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1332.412544][T13547] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1332.432739][T13547] usb 8-1: USB disconnect, device number 46 [ 1332.618995][T13547] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1333.164982][T13547] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1333.336882][T13547] usb 7-1: config index 0 descriptor too short (expected 8192, got 36) [ 1333.336900][T13547] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.336910][T13547] usb 7-1: config 0 has no interfaces? [ 1333.336926][T13547] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1333.336938][T13547] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.349296][T13547] usb 7-1: config 0 descriptor?? [ 1335.859749][T15465] usb 7-1: USB disconnect, device number 48 [ 1338.083601][T19192] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1339.210919][T18998] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1339.265006][ T9921] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1339.458352][T18998] usb 7-1: config index 0 descriptor too short (expected 8192, got 36) [ 1339.458369][T18998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.458378][T18998] usb 7-1: config 0 has no interfaces? [ 1339.458395][T18998] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1339.458407][T18998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.462123][T18998] usb 7-1: config 0 descriptor?? [ 1341.785703][T18998] usb 7-1: USB disconnect, device number 49 [ 1343.032186][T19234] input: syz0 as /devices/virtual/input/input32 [ 1344.845107][ T5867] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1345.210942][ T5867] usb 7-1: config index 0 descriptor too short (expected 8192, got 36) [ 1345.210970][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.210988][ T5867] usb 7-1: config 0 has no interfaces? [ 1345.211018][ T5867] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1345.211040][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.284095][ T5867] usb 7-1: config 0 descriptor?? [ 1345.543938][T11942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1345.561675][T11942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1345.612894][T11942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1345.624215][T11942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1345.665747][T11942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1347.010587][ T9921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1347.047676][ T9921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1347.077213][ T9921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1347.078474][ T9921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1347.079058][ T9921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1347.350503][T13547] usb 7-1: USB disconnect, device number 50 [ 1347.825474][T11942] Bluetooth: hci0: command tx timeout [ 1349.193990][T11942] Bluetooth: hci6: command tx timeout [ 1349.905080][T11942] Bluetooth: hci0: command tx timeout [ 1350.251545][ T9921] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1350.295311][ T9921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1350.299683][ T9921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1350.301076][ T9921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1350.302128][ T9921] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1351.295045][T11942] Bluetooth: hci6: command tx timeout [ 1351.985037][T11942] Bluetooth: hci0: command tx timeout [ 1352.479731][T11942] Bluetooth: hci7: command tx timeout [ 1352.521006][T19277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.379030][T11942] Bluetooth: hci6: command tx timeout [ 1354.065164][T11942] Bluetooth: hci0: command tx timeout [ 1354.555207][T11942] Bluetooth: hci7: command tx timeout [ 1354.903279][ T9453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.175670][ T5867] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 1355.327334][ T5867] usb 7-1: config index 0 descriptor too short (expected 8192, got 36) [ 1355.327352][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.327362][ T5867] usb 7-1: config 0 has no interfaces? [ 1355.327378][ T5867] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1355.327390][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.331317][ T5867] usb 7-1: config 0 descriptor?? [ 1355.425157][T11942] Bluetooth: hci6: command tx timeout [ 1355.616035][ T9453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.644167][T19318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1355.752675][T19258] chnl_net:caif_netlink_parms(): no params data found [ 1355.922530][T18998] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1355.967311][ T9453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.081587][T18998] usb 10-1: config 0 has an invalid interface number: 113 but max is 0 [ 1356.081615][T18998] usb 10-1: config 0 has no interface number 0 [ 1356.081657][T18998] usb 10-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1356.081685][T18998] usb 10-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1356.081707][T18998] usb 10-1: config 0 interface 113 has no altsetting 0 [ 1356.140115][T18998] usb 10-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1356.140145][T18998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.140164][T18998] usb 10-1: Product: syz [ 1356.140178][T18998] usb 10-1: Manufacturer: syz [ 1356.140199][T18998] usb 10-1: SerialNumber: syz [ 1356.167117][T18998] usb 10-1: config 0 descriptor?? [ 1356.256041][ C0] usb 10-1: NFC: Urb failure (status -71) [ 1356.258067][T18998] usb 10-1: NFC: Unable to get FW version [ 1356.294593][T18998] pn533_usb 10-1:0.113: probe with driver pn533_usb failed with error -90 [ 1356.359170][T19251] chnl_net:caif_netlink_parms(): no params data found [ 1356.581793][ T9453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.625437][T11942] Bluetooth: hci7: command tx timeout [ 1356.731269][T19270] chnl_net:caif_netlink_parms(): no params data found [ 1356.912005][T19258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.912286][T19258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.912512][T19258] bridge_slave_0: entered allmulticast mode [ 1356.938639][T19258] bridge_slave_0: entered promiscuous mode [ 1356.978821][T19258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.978922][T19258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.979073][T19258] bridge_slave_1: entered allmulticast mode [ 1356.980843][T19258] bridge_slave_1: entered promiscuous mode [ 1357.107814][T19251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.107880][T19251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.108025][T19251] bridge_slave_0: entered allmulticast mode [ 1357.110236][T19251] bridge_slave_0: entered promiscuous mode [ 1357.168145][T19251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.168368][T19251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.168984][T19251] bridge_slave_1: entered allmulticast mode [ 1357.170537][T19251] bridge_slave_1: entered promiscuous mode [ 1357.180323][T19258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.224142][T19270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.224253][T19270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.224526][T19270] bridge_slave_0: entered allmulticast mode [ 1357.247613][T19270] bridge_slave_0: entered promiscuous mode [ 1357.269362][T19258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.271168][T19270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.271258][T19270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.271416][T19270] bridge_slave_1: entered allmulticast mode [ 1357.273151][T19270] bridge_slave_1: entered promiscuous mode [ 1357.402117][T19251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.451760][T19251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.496116][T19258] team0: Port device team_slave_0 added [ 1357.503847][T19270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.552914][T19258] team0: Port device team_slave_1 added [ 1357.573582][T19270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.601745][T13547] usb 7-1: USB disconnect, device number 51 [ 1357.694725][ T9453] bridge_slave_1: left allmulticast mode [ 1357.694752][ T9453] bridge_slave_1: left promiscuous mode [ 1357.698292][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.783881][ T9453] bridge_slave_0: left allmulticast mode [ 1357.783901][ T9453] bridge_slave_0: left promiscuous mode [ 1357.784063][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.706111][T18998] usb 10-1: USB disconnect, device number 37 [ 1358.715240][T11942] Bluetooth: hci7: command tx timeout [ 1358.977995][ T9453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.088005][ T9453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.139440][ T9453] bond0 (unregistering): Released all slaves [ 1359.194019][T19342] binder: 19341:19342 ioctl 4018620d 0 returned -22 [ 1359.208359][T19342] binder: 19341:19342 ioctl c0306201 200000000540 returned -22 [ 1359.210877][T19251] team0: Port device team_slave_0 added [ 1359.644317][ T5867] syz0: Port: 1 Link DOWN [ 1359.652925][T19251] team0: Port device team_slave_1 added [ 1359.653684][T19258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.653694][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.653709][T19258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.708745][T19270] team0: Port device team_slave_0 added [ 1359.843291][T19258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.843303][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.843317][T19258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.876964][T19270] team0: Port device team_slave_1 added [ 1360.050693][T19251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.050710][T19251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.050735][T19251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.265687][T19251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.265704][T19251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.265730][T19251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.500183][T19270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.500196][T19270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.500210][T19270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.711411][T19270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.711422][T19270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.711437][T19270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.774764][T19258] hsr_slave_0: entered promiscuous mode [ 1360.806210][T19258] hsr_slave_1: entered promiscuous mode [ 1360.807143][T19258] debugfs: 'hsr0' already exists in 'hsr' [ 1360.807168][T19258] Cannot create hsr debugfs directory [ 1361.056049][ T9453] hsr_slave_0: left promiscuous mode [ 1361.103372][ T9453] hsr_slave_1: left promiscuous mode [ 1361.105518][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1361.105545][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.129709][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.129738][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.232687][ T9453] veth1_macvtap: left promiscuous mode [ 1361.232755][ T9453] veth0_macvtap: left promiscuous mode [ 1361.232890][ T9453] veth1_vlan: left promiscuous mode [ 1361.232983][ T9453] veth0_vlan: left promiscuous mode [ 1361.795007][ T5872] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1361.963006][ T5872] usb 10-1: config index 0 descriptor too short (expected 8192, got 36) [ 1361.963024][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.963034][ T5872] usb 10-1: config 0 has no interfaces? [ 1361.963051][ T5872] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1361.963063][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.977673][ T5872] usb 10-1: config 0 descriptor?? [ 1362.815831][ T9453] team0 (unregistering): Port device team_slave_1 removed [ 1362.877126][ T9453] team0 (unregistering): Port device team_slave_0 removed [ 1363.368806][T19251] hsr_slave_0: entered promiscuous mode [ 1363.370136][T19251] hsr_slave_1: entered promiscuous mode [ 1363.452411][T19270] hsr_slave_0: entered promiscuous mode [ 1363.453663][T19270] hsr_slave_1: entered promiscuous mode [ 1363.454240][T19270] debugfs: 'hsr0' already exists in 'hsr' [ 1363.454255][T19270] Cannot create hsr debugfs directory [ 1364.766963][T18998] usb 10-1: USB disconnect, device number 38 [ 1366.993448][T19417] futex_wake_op: syz.6.3811 tries to shift op by -1; fix this program [ 1367.038570][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.038612][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.619517][ T9453] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.233083][ T9453] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.647207][ T9453] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.188225][ T9453] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.205045][T15465] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 1369.362466][T15465] usb 10-1: config index 0 descriptor too short (expected 8192, got 36) [ 1369.362494][T15465] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.362512][T15465] usb 10-1: config 0 has no interfaces? [ 1369.362540][T15465] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1369.362560][T15465] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.472770][T15465] usb 10-1: config 0 descriptor?? [ 1371.111450][ T9453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.111473][ T9453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.786896][ T9453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.786918][ T9453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.889473][ T5881] usb 10-1: USB disconnect, device number 39 [ 1372.428922][ T9453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.428944][ T9453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.969364][ T9453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.969386][ T9453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.852491][T19258] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1373.892605][ T9453] veth5: left allmulticast mode [ 1373.892631][ T9453] veth5: left promiscuous mode [ 1373.916309][ T9453] bridge1: port 1(veth5) entered disabled state [ 1374.000124][ T9453] bridge_slave_1: left allmulticast mode [ 1374.000144][ T9453] bridge_slave_1: left promiscuous mode [ 1374.000294][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.086313][ T9453] bridge_slave_0: left allmulticast mode [ 1374.086332][ T9453] bridge_slave_0: left promiscuous mode [ 1374.086485][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.204476][ T9453] veth5: left allmulticast mode [ 1374.204501][ T9453] veth5: left promiscuous mode [ 1374.204736][ T9453] bridge2: port 3(veth5) entered disabled state [ 1374.309324][ T9453] veth0_to_bond: left allmulticast mode [ 1374.309348][ T9453] veth0_to_bond: left promiscuous mode [ 1374.309560][ T9453] bridge2: port 2(veth0_to_bond) entered disabled state [ 1374.416452][ T9453] veth3: left allmulticast mode [ 1374.416478][ T9453] veth3: left promiscuous mode [ 1374.416730][ T9453] bridge2: port 1(veth3) entered disabled state [ 1374.895086][ T5844] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1375.048087][ T5844] usb 7-1: config index 0 descriptor too short (expected 8192, got 36) [ 1375.048105][ T5844] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.048116][ T5844] usb 7-1: config 0 has no interfaces? [ 1375.048136][ T5844] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1375.048148][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.058687][ T5844] usb 7-1: config 0 descriptor?? [ 1375.994584][ T9453] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1376.376389][ T9453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.477338][ T9453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.518395][ T9453] bond0 (unregistering): Released all slaves [ 1376.524270][ T9453] bond1 (unregistering): Released all slaves [ 1376.875727][ T9453] bond1 (unregistering): (slave vxlan0): Releasing active interface [ 1377.126606][ T9453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.226443][ T9453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.282809][ T9453] bond0 (unregistering): Released all slaves [ 1377.300484][ T9453] bond1 (unregistering): Released all slaves [ 1377.360674][T19258] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1377.529353][ T9453] !: left promiscuous mode [ 1377.683085][T19258] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1377.771119][T19258] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1377.791615][T15465] usb 7-1: USB disconnect, device number 52 [ 1377.911199][ T9453] tipc: Left network mode [ 1378.203628][T19532] Bluetooth: MGMT ver 1.23 [ 1378.396785][T19251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1378.554237][T19251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1378.593794][T19251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1378.840626][T19251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1379.429758][T19270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1379.629416][T19270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1379.760555][T19270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1379.836997][T19270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1379.928354][T19258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.105010][ T9453] hsr_slave_0: left promiscuous mode [ 1380.121804][T19575] afs: Unknown parameter 'fs' [ 1380.152294][ T9453] hsr_slave_1: left promiscuous mode [ 1380.153062][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.153079][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.206161][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.206188][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.386287][ T5867] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1380.425142][ T9453] hsr_slave_0: left promiscuous mode [ 1380.465680][ T9453] hsr_slave_1: left promiscuous mode [ 1380.466485][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.466502][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.526960][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.526987][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.550193][ T5867] usb 10-1: Using ep0 maxpacket: 32 [ 1380.591763][ T5867] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1380.591789][ T5867] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1380.591809][ T5867] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1380.591851][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1380.591871][ T5867] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1380.591894][ T5867] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1380.591933][ T5867] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1380.591954][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.677170][ T9453] veth1_macvtap: left promiscuous mode [ 1380.677291][ T9453] veth0_macvtap: left promiscuous mode [ 1380.683332][ T5867] usb 10-1: config 0 descriptor?? [ 1380.807236][ T9453] veth1_macvtap: left promiscuous mode [ 1380.807345][ T9453] veth0_macvtap: left promiscuous mode [ 1380.807553][ T9453] veth1_vlan: left promiscuous mode [ 1380.807697][ T9453] veth0_vlan: left promiscuous mode [ 1380.890753][ T5867] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1381.165832][ T5872] usb 10-1: USB disconnect, device number 40 [ 1381.176537][ T5872] usblp0: removed [ 1381.635501][ T9453] team0 (unregistering): Port device team_slave_1 removed [ 1381.705653][ T9453] team0 (unregistering): Port device team_slave_0 removed [ 1383.216122][ T9453] team0 (unregistering): Port device team_slave_1 removed [ 1383.296187][ T9453] team0 (unregistering): Port device team_slave_0 removed [ 1384.042106][T19258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.112680][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.112971][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.151467][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.152660][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.591874][T19251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.759351][T19251] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.807148][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.809705][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.884640][T19627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1384.914959][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.915088][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.999092][T19270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.188089][T19270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.204964][ T5867] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 1385.269680][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.269822][ T8150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.300601][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.300741][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.512617][ T5867] usb 10-1: config 0 has an invalid interface number: 113 but max is 0 [ 1385.512646][ T5867] usb 10-1: config 0 has no interface number 0 [ 1385.512686][ T5867] usb 10-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1385.512713][ T5867] usb 10-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1385.512734][ T5867] usb 10-1: config 0 interface 113 has no altsetting 0 [ 1385.736965][ T5867] usb 10-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1385.736983][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.736993][ T5867] usb 10-1: Product: syz [ 1385.737001][ T5867] usb 10-1: Manufacturer: syz [ 1385.737008][ T5867] usb 10-1: SerialNumber: syz [ 1385.739841][ T5867] usb 10-1: config 0 descriptor?? [ 1385.802037][ C1] usb 10-1: NFC: Urb failure (status -71) [ 1385.802487][ T5867] usb 10-1: NFC: Unable to get FW version [ 1385.802859][ T5867] pn533_usb 10-1:0.113: probe with driver pn533_usb failed with error -90 [ 1386.035609][T19258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.515729][T19251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.175936][T19270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.553573][T19258] veth0_vlan: entered promiscuous mode [ 1387.566888][T19270] veth0_vlan: entered promiscuous mode [ 1387.611423][T19258] veth1_vlan: entered promiscuous mode [ 1387.644129][T19270] veth1_vlan: entered promiscuous mode [ 1387.823788][T19258] veth0_macvtap: entered promiscuous mode [ 1387.839530][T19270] veth0_macvtap: entered promiscuous mode [ 1387.854034][T19258] veth1_macvtap: entered promiscuous mode [ 1387.861521][T19270] veth1_macvtap: entered promiscuous mode [ 1388.010309][T19258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.010699][ T5867] usb 10-1: USB disconnect, device number 41 [ 1388.068446][T19270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.112287][T19258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.159628][T19270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.190588][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.240288][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.242607][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.244464][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.278430][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.309451][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.352912][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.377146][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.674301][T19251] veth0_vlan: entered promiscuous mode [ 1389.012116][T19251] veth1_vlan: entered promiscuous mode [ 1389.229665][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.229687][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.356095][ T9453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.356110][ T9453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.514183][T19251] veth0_macvtap: entered promiscuous mode [ 1389.674463][T19251] veth1_macvtap: entered promiscuous mode [ 1389.679918][ T9453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.679938][ T9453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.719903][ T9453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.719917][ T9453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.874195][T19251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.917154][T19251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.962335][ T9453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.984634][ T9453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.991527][ T9453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.991592][ T9453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.671300][ T862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.672557][ T862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.978031][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.978051][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.055789][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3881'. [ 1393.095335][ T5844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1393.855361][T19797] mkiss: ax0: crc mode is auto. [ 1394.146511][T13198] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1394.851153][T19811] futex_wake_op: syz.6.3890 tries to shift op by -1; fix this program [ 1398.215138][T13198] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1398.386446][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1398.395048][T13198] usb 10-1: Using ep0 maxpacket: 16 [ 1398.398279][T13198] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 1398.403860][T13198] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1398.403888][T13198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.403907][T13198] usb 10-1: Product: syz [ 1398.403919][T13198] usb 10-1: Manufacturer: syz [ 1398.403932][T13198] usb 10-1: SerialNumber: syz [ 1398.429163][T13198] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1398.429188][T13198] r8152-cfgselector 10-1: config 0 descriptor?? [ 1398.899909][T19883] team0: No ports can be present during mode change [ 1399.435101][T19897] netlink: 'syz.6.3912': attribute type 16 has an invalid length. [ 1399.435125][T19897] netlink: 'syz.6.3912': attribute type 17 has an invalid length. [ 1399.569882][T19901] netlink: 'syz.6.3912': attribute type 13 has an invalid length. [ 1400.206948][T19897] net_ratelimit: 3407 callbacks suppressed [ 1400.206957][T19897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1400.264238][T19914] futex_wake_op: syz.5.3913 tries to shift op by -1; fix this program [ 1403.521091][T19984] binder: 19983:19984 ioctl c0306201 0 returned -14 [ 1404.088010][T19992] futex_wake_op: syz.4.3933 tries to shift op by -1; fix this program [ 1404.977326][ T808] r8152-cfgselector 10-1: USB disconnect, device number 42 [ 1406.191548][T20053] binder: 20050:20053 ioctl c0306201 0 returned -14 [ 1406.726983][T20063] netlink: 'syz.9.3947': attribute type 4 has an invalid length. [ 1406.800954][T20065] batman_adv: batadv0: Adding interface: dummy0 [ 1406.800973][T20065] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.801003][T20065] batman_adv: batadv0: Interface activated: dummy0 [ 1406.905935][T20067] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1406.934312][T20065] batadv0: mtu less than device minimum [ 1406.954383][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1406.973346][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1406.994116][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1407.019813][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1407.038041][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1407.059717][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1407.080258][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1407.100041][T20065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1407.358345][T20079] binder: 20077:20079 ioctl c0306201 0 returned -14 [ 1407.819079][T20087] futex_wake_op: syz.9.3952 tries to shift op by -1; fix this program [ 1407.881992][T20094] fuse: Unknown parameter 'fd0x0000000000000004' [ 1409.466841][T20109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.501483][T20109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.366539][T20109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.387938][T20109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.565492][ T4497] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.610257][T20137] fuse: Unknown parameter 'fd0x0000000000000004' [ 1411.730230][T20141] afs: Unknown parameter 'fs' [ 1411.741233][ T4497] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.836430][ T4497] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.837688][ T4497] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.885504][T20148] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.005009][ T5867] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1412.156456][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 1412.173589][ T5867] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1412.173619][ T5867] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1412.173641][ T5867] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1412.173691][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1412.173713][ T5867] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1412.173742][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1412.173783][ T5867] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1412.173804][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.209652][ T5867] usb 7-1: config 0 descriptor?? [ 1412.309679][T20153] futex_wake_op: syz.1.3971 tries to shift op by -1; fix this program [ 1412.657400][ T5867] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1412.807251][ T808] usb 7-1: USB disconnect, device number 53 [ 1412.836664][ T808] usblp0: removed [ 1413.267790][T20180] fuse: Unknown parameter 'fd0x0000000000000004' [ 1415.025978][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1417.695320][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4004'. [ 1419.666914][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4016'. [ 1420.314796][ T9921] Bluetooth: hci2: command 0x0406 tx timeout [ 1420.533854][T20362] futex_wake_op: syz.1.4026 tries to shift op by -1; fix this program [ 1421.240548][T20380] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4030'. [ 1421.724644][T20393] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 1423.064753][T20436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1423.346879][T20446] binder: 20445:20446 ioctl c0306201 0 returned -14 [ 1423.830513][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4053'. [ 1423.887946][T20466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.909093][T20466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.927273][T20458] futex_wake_op: syz.9.4048 tries to shift op by -1; fix this program [ 1424.059664][T20472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1424.304500][T20483] tipc: Enabling of bearer rejected, failed to enable media [ 1425.153746][T20512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4068'. [ 1425.153772][T20512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4068'. [ 1425.760105][T20525] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1426.145760][T13547] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1426.295059][T13547] usb 6-1: device descriptor read/64, error -71 [ 1426.378130][T20550] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 1426.384035][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 1426.384064][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 1426.462871][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4081'. [ 1426.535096][T13547] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1426.686360][T13547] usb 6-1: device descriptor read/64, error -71 [ 1426.795466][T13547] usb usb6-port1: attempt power cycle [ 1426.801087][T20567] futex_wake_op: syz.1.4084 tries to shift op by -1; fix this program [ 1427.145082][T13547] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1427.165964][T13547] usb 6-1: device descriptor read/8, error -71 [ 1427.425054][T13547] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1427.447029][T13547] usb 6-1: device descriptor read/8, error -71 [ 1427.562246][T13547] usb usb6-port1: unable to enumerate USB device [ 1428.461551][T20591] kvm: pic: level sensitive irq not supported [ 1428.461605][T20591] kvm: pic: non byte read [ 1428.461707][T20591] kvm: pic: level sensitive irq not supported [ 1428.461744][T20591] kvm: pic: non byte read [ 1428.471000][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.471071][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.069842][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4094'. [ 1429.069867][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4094'. [ 1430.606739][T20651] hub 9-0:1.0: USB hub found [ 1430.613927][T20651] hub 9-0:1.0: 1 port detected [ 1431.340512][T20681] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4111'. [ 1433.692950][T20754] syzkaller0: entered promiscuous mode [ 1433.692976][T20754] syzkaller0: entered allmulticast mode [ 1434.520898][T20778] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20000 [ 1434.865095][T13547] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1434.959614][T20797] fuse: Unknown parameter 'use00000000000000000000' [ 1434.969238][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 1434.969257][ T37] audit: type=1326 audit(2000000188.009:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20794 comm="syz.6.4140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb75a9c819 code=0x0 [ 1435.044988][T13547] usb 10-1: device descriptor read/64, error -71 [ 1435.228728][T20808] fuse: Bad value for 'fd' [ 1435.285064][T13547] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 1435.436338][T13547] usb 10-1: device descriptor read/64, error -71 [ 1435.546595][T13547] usb usb10-port1: attempt power cycle [ 1435.906762][T20828] syzkaller0: entered promiscuous mode [ 1435.908380][T20828] syzkaller0: entered allmulticast mode [ 1435.924940][T13547] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 1435.935905][T13198] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1436.019015][T13547] usb 10-1: device descriptor read/8, error -71 [ 1436.106222][T13198] usb 6-1: Using ep0 maxpacket: 16 [ 1436.112007][T13198] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1436.135186][T13198] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1436.135214][T13198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.135232][T13198] usb 6-1: Product: syz [ 1436.135245][T13198] usb 6-1: Manufacturer: syz [ 1436.135266][T13198] usb 6-1: SerialNumber: syz [ 1436.246800][T13198] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1436.246818][T13198] r8152-cfgselector 6-1: config 0 descriptor?? [ 1436.327368][T13547] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 1436.427536][T13547] usb 10-1: device descriptor read/8, error -71 [ 1436.545867][T13547] usb usb10-port1: unable to enumerate USB device [ 1436.627799][T20842] fuse: Unknown parameter 'use00000000000000000000' [ 1437.362627][T20865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.463210][T20867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.482546][T20865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.618137][T20872] fuse: Bad value for 'fd' [ 1438.238112][ T9453] ------------[ cut here ]------------ [ 1438.238122][ T9453] intreq != rdev->scan_req && intreq != rdev->int_scan_req [ 1438.238133][ T9453] WARNING: net/wireless/scan.c:1193 at cfg80211_scan_done+0x2d8/0x4a0, CPU#0: kworker/u8:17/9453 [ 1438.238274][ T9453] Modules linked in: [ 1438.238298][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1438.238313][ T9453] Tainted: [L]=SOFTLOCKUP [ 1438.238316][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1438.238324][ T9453] Workqueue: events_unbound cfg80211_wiphy_work [ 1438.238389][ T9453] RIP: 0010:cfg80211_scan_done+0x2d8/0x4a0 [ 1438.238400][ T9453] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bd 14 b8 00 cc e8 87 d8 54 f7 90 0f 0b 90 e9 2a fe ff ff e8 79 d8 54 f7 90 <0f> 0b 90 e9 d0 fe ff ff e8 6b d8 54 f7 48 8d 3d 44 73 0a 05 67 48 [ 1438.238409][ T9453] RSP: 0018:ffffc90003fa7920 EFLAGS: 00010293 [ 1438.238418][ T9453] RAX: ffffffff8a6fadf7 RBX: ffff8880619dc218 RCX: ffff888028613d00 [ 1438.238426][ T9453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1438.238432][ T9453] RBP: ffffc90003fa7a00 R08: 0000000000000000 R09: 0000000000000000 [ 1438.238439][ T9453] R10: dffffc0000000000 R11: fffffbfff1ed4db7 R12: ffff8880763e0278 [ 1438.238445][ T9453] R13: dffffc0000000000 R14: ffff8880619dc200 R15: ffff8880763e0860 [ 1438.238453][ T9453] FS: 0000000000000000(0000) GS:ffff888126335000(0000) knlGS:0000000000000000 [ 1438.238461][ T9453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1438.238467][ T9453] CR2: 0000200000219030 CR3: 000000007e0ce000 CR4: 00000000003526f0 [ 1438.238480][ T9453] Call Trace: [ 1438.238488][ T9453] [ 1438.238497][ T9453] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 1438.238514][ T9453] __ieee80211_scan_completed+0x563/0xb70 [ 1438.238590][ T9453] cfg80211_wiphy_work+0x2ab/0x4a0 [ 1438.238604][ T9453] ? process_scheduled_works+0xa8d/0x18c0 [ 1438.238627][ T9453] process_scheduled_works+0xb6e/0x18c0 [ 1438.238656][ T9453] ? __pfx_process_scheduled_works+0x10/0x10 [ 1438.238673][ T9453] ? assign_work+0x3d5/0x5e0 [ 1438.238689][ T9453] worker_thread+0xa53/0xfc0 [ 1438.238716][ T9453] kthread+0x388/0x470 [ 1438.238728][ T9453] ? __pfx_worker_thread+0x10/0x10 [ 1438.238740][ T9453] ? __pfx_kthread+0x10/0x10 [ 1438.238752][ T9453] ret_from_fork+0x51e/0xb90 [ 1438.238769][ T9453] ? __pfx_ret_from_fork+0x10/0x10 [ 1438.238782][ T9453] ? __switch_to+0xc7d/0x1450 [ 1438.238813][ T9453] ? __pfx_kthread+0x10/0x10 [ 1438.238824][ T9453] ret_from_fork_asm+0x1a/0x30 [ 1438.238852][ T9453] [ 1438.238862][ T9453] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1438.238872][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1438.238885][ T9453] Tainted: [L]=SOFTLOCKUP [ 1438.238889][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1438.238895][ T9453] Workqueue: events_unbound cfg80211_wiphy_work [ 1438.238908][ T9453] Call Trace: [ 1438.238913][ T9453] [ 1438.238917][ T9453] vpanic+0x56c/0xa60 [ 1438.238936][ T9453] ? __pfx__printk+0x10/0x10 [ 1438.238947][ T9453] ? __pfx_vpanic+0x10/0x10 [ 1438.238960][ T9453] ? is_bpf_text_address+0x292/0x2b0 [ 1438.238984][ T9453] ? is_bpf_text_address+0x26/0x2b0 [ 1438.239002][ T9453] panic+0xc5/0xd0 [ 1438.239016][ T9453] ? __pfx_panic+0x10/0x10 [ 1438.239034][ T9453] ? ret_from_fork_asm+0x1a/0x30 [ 1438.239047][ T9453] __warn+0x315/0x4f0 [ 1438.239060][ T9453] ? cfg80211_scan_done+0x2d8/0x4a0 [ 1438.239071][ T9453] ? cfg80211_scan_done+0x2d8/0x4a0 [ 1438.239081][ T9453] __report_bug+0x29a/0x540 [ 1438.239168][ T9453] ? cfg80211_scan_done+0x2d8/0x4a0 [ 1438.239187][ T9453] ? __pfx___report_bug+0x10/0x10 [ 1438.239204][ T9453] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1438.239274][ T9453] ? cfg80211_scan_done+0x2d8/0x4a0 [ 1438.239283][ T9453] report_bug+0x16a/0x220 [ 1438.239293][ T9453] ? cfg80211_scan_done+0x2d8/0x4a0 [ 1438.239307][ T9453] ? cfg80211_scan_done+0x2da/0x4a0 [ 1438.239319][ T9453] handle_bug+0x9c/0x200 [ 1438.239374][ T9453] exc_invalid_op+0x1a/0x50 [ 1438.239386][ T9453] asm_exc_invalid_op+0x1a/0x20 [ 1438.239408][ T9453] RIP: 0010:cfg80211_scan_done+0x2d8/0x4a0 [ 1438.239418][ T9453] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bd 14 b8 00 cc e8 87 d8 54 f7 90 0f 0b 90 e9 2a fe ff ff e8 79 d8 54 f7 90 <0f> 0b 90 e9 d0 fe ff ff e8 6b d8 54 f7 48 8d 3d 44 73 0a 05 67 48 [ 1438.239427][ T9453] RSP: 0018:ffffc90003fa7920 EFLAGS: 00010293 [ 1438.239436][ T9453] RAX: ffffffff8a6fadf7 RBX: ffff8880619dc218 RCX: ffff888028613d00 [ 1438.239444][ T9453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1438.239450][ T9453] RBP: ffffc90003fa7a00 R08: 0000000000000000 R09: 0000000000000000 [ 1438.239457][ T9453] R10: dffffc0000000000 R11: fffffbfff1ed4db7 R12: ffff8880763e0278 [ 1438.239464][ T9453] R13: dffffc0000000000 R14: ffff8880619dc200 R15: ffff8880763e0860 [ 1438.239475][ T9453] ? cfg80211_scan_done+0x2d7/0x4a0 [ 1438.239492][ T9453] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 1438.239508][ T9453] __ieee80211_scan_completed+0x563/0xb70 [ 1438.239526][ T9453] cfg80211_wiphy_work+0x2ab/0x4a0 [ 1438.239539][ T9453] ? process_scheduled_works+0xa8d/0x18c0 [ 1438.239554][ T9453] process_scheduled_works+0xb6e/0x18c0 [ 1438.239583][ T9453] ? __pfx_process_scheduled_works+0x10/0x10 [ 1438.239599][ T9453] ? assign_work+0x3d5/0x5e0 [ 1438.239615][ T9453] worker_thread+0xa53/0xfc0 [ 1438.239642][ T9453] kthread+0x388/0x470 [ 1438.239653][ T9453] ? __pfx_worker_thread+0x10/0x10 [ 1438.239665][ T9453] ? __pfx_kthread+0x10/0x10 [ 1438.239676][ T9453] ret_from_fork+0x51e/0xb90 [ 1438.239692][ T9453] ? __pfx_ret_from_fork+0x10/0x10 [ 1438.239705][ T9453] ? __switch_to+0xc7d/0x1450 [ 1438.239720][ T9453] ? __pfx_kthread+0x10/0x10 [ 1438.239731][ T9453] ret_from_fork_asm+0x1a/0x30 [ 1438.239749][ T9453] [ 1438.240157][ T9453] Kernel Offset: disabled