last executing test programs: 37m11.370281785s ago: executing program 32 (id=491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4041810}, 0xa4f9abdea76f00cb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x288001, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xffffffff, 0x21f9, 0x86a9, 0x4, 0x9, 0x9, 0x9e}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x54) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) 37m8.589257022s ago: executing program 33 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 37m6.625076463s ago: executing program 34 (id=504): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x84, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9198}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2aa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="00dab511915161511b6200"/24], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) 37m6.134496861s ago: executing program 35 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbf7, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) 34m35.874589639s ago: executing program 36 (id=801): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) unshare(0x10000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r3, 0x731, 0x70bd2b, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x2}, 0x20000014) 32m57.043253891s ago: executing program 37 (id=1033): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000c}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x4048000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000010000000000fedbdf2507000000ec00000005000000000000000c0043"], 0x30}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 32m33.300927836s ago: executing program 38 (id=1090): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x488, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x40, 0xdc2, 0x1000, {0x7, 0x1, 0xe, 0x6, 0x6, 0x1}, {0x0, 0x1, 0x94, 0x9, 0x401}, 0x9, 0x5, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x5, 0x5, 0x0, 0x1, 0x7, 0x4, 0x4, 0x7, 0x3e97, 0x5, 0x18, 0xd, 0xfff, 0x0, 0x5, 0x8, 0x6, 0x0, 0xfce, 0x9, 0x8, 0x5, 0xfff, 0x6, 0xf, 0x6, 0x0, 0x8, 0x5edaf873, 0x1, 0xffff, 0xf1, 0x7, 0x7fffffff, 0x7ff, 0x8, 0x5, 0x4, 0x963e, 0x3, 0x56, 0xfff, 0x875, 0x29c, 0x1000, 0x400, 0x2, 0x1, 0x9, 0x9, 0xfffffffe, 0x7, 0x400, 0xffffff81, 0x0, 0x9, 0x2000, 0x1e2, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x621, 0x0, 0xff, 0x1ff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3568, 0x4, 0x10001, 0x4, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x877, 0x6, 0x7, 0x5, 0x7, 0x1, 0x1ff, 0x200, 0x0, 0x9, 0x8, 0x0, 0x7b, 0x3ff, 0x4e, 0xf, 0x3, 0x400, 0x101, 0xfffffff4, 0x1, 0x3, 0x2332, 0x732d4911, 0x9, 0x7, 0xa48, 0x6, 0x7fff, 0x8, 0x6, 0x8, 0xfffffffd, 0x18b, 0x9, 0x7fffffff, 0x5, 0x51e, 0xfffffff8, 0x5, 0x1, 0x7fffffff, 0x6, 0x5, 0x2, 0x0, 0x7ff, 0xa, 0x80000001, 0xde, 0x7a, 0x5, 0x3, 0x1, 0x2, 0x7, 0x6, 0x2792, 0x7, 0x1, 0x8, 0x5, 0x5, 0xa, 0x5, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x2, 0x252, 0x1, 0x4, 0x40000, 0x3, 0x6, 0x101, 0x1, 0x10, 0x3, 0x4, 0xc, 0xfffff801, 0x8, 0x0, 0x1, 0x6, 0x80000000, 0x1c, 0xd810, 0x1, 0x8001, 0x80, 0x5, 0x1, 0xfffffff8, 0x800, 0x4, 0x9, 0x9, 0x90000000, 0x5, 0x8, 0x6, 0x3ff, 0x53b2, 0x0, 0x9, 0x7, 0x7f, 0x6, 0x1, 0x4, 0xc7, 0x5, 0x6, 0x5, 0x5, 0x7fff, 0x12bc, 0x3, 0xffffffff, 0x1, 0xd, 0xa64, 0x5, 0xfffffff9, 0x2, 0x8, 0x8, 0x200, 0x8, 0xe512, 0xb5, 0x3, 0x0, 0x9f, 0x0, 0x7f, 0x6, 0x1, 0x3b1c, 0xc7, 0x2, 0xfffffffc, 0xa0, 0x100, 0x2, 0x6, 0x101, 0x3ff, 0x2, 0x8, 0x70, 0xd5, 0xffffffff, 0xf, 0xc, 0x1, 0x401, 0xffffffff, 0x1, 0x19d, 0x10001, 0x8fde, 0x8, 0x9]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x884}, 0x40) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r7, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) 32m30.568696236s ago: executing program 39 (id=1100): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 27m17.988324212s ago: executing program 2 (id=2044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x2000c001, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x406, 0x0) 27m17.576402599s ago: executing program 2 (id=2050): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)={0x2f, 0x17, 0x2, {0xa, './security'}}, 0x13) 27m17.546333999s ago: executing program 5 (id=2051): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040015) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x8, 0xfbdf, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r3, 0x3) r4 = socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x6c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x6c}}, 0x44851) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_clone(0x2081000, &(0x7f0000000340)="6e28a7072eb0d7126512fa6af876ee06b0f66f77cfe7d0854f133c39cbf53ea57a4804bd72f2b266d33b", 0x2a, &(0x7f0000000380), 0x0, &(0x7f00000008c0)="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") bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 27m17.044488442s ago: executing program 2 (id=2053): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0) 27m16.468378228s ago: executing program 5 (id=2055): r0 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 27m16.384175073s ago: executing program 2 (id=2056): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001180)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf9a207100e69cfa59e8d5751fb9136ec4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x3b}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 27m16.020521621s ago: executing program 5 (id=2058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c00010006000600"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 27m15.898661529s ago: executing program 2 (id=2059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x2, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x3, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x1, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x466cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 27m15.622445445s ago: executing program 5 (id=2060): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) rt_sigsuspend(&(0x7f00000001c0)={[0x8001]}, 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x91a, 0x6, 0x1000045, 0xfffb, 0x9, 0xf, 0xfffffffffffffffd, 0x3, 0xab], 0x200000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27m14.004497418s ago: executing program 5 (id=2061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xbc, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, 0xff, 0x2}) 27m12.809778211s ago: executing program 2 (id=2064): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27m11.367385284s ago: executing program 5 (id=2066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x7}}, 0x0, @random=0x3f, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x14, 0x80, [@random_vendor={0xdd, 0x6, "d0c564bb2406"}, @channel_switch={0x25, 0x3, {0x0, 0x64, 0x7}}, @challenge={0x10, 0x1, 0x53}]}, @NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x80}}, 0x0) 27m1.292505126s ago: executing program 40 (id=2054): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) 27m1.116991905s ago: executing program 41 (id=2057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 26m57.72672966s ago: executing program 42 (id=2064): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 26m56.199966093s ago: executing program 43 (id=2066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x7}}, 0x0, @random=0x3f, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x14, 0x80, [@random_vendor={0xdd, 0x6, "d0c564bb2406"}, @channel_switch={0x25, 0x3, {0x0, 0x64, 0x7}}, @challenge={0x10, 0x1, 0x53}]}, @NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x80}}, 0x0) 14m43.03487072s ago: executing program 6 (id=4309): socket$nl_generic(0x10, 0x3, 0x10) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000002d242e580c554568ee9d45af2512e9", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf2501000000000000000841000000140006001100087564703a73797a300000000090d77d6bf168ea85c3a80b40e9effed09f7a1c558fd886584c6d1500cad162ffbb95d5bc814c386e7f1591d0b7a78ad1ccd30cae01e511556799bddd9fd426b788e7dc3b158b30bb8ae4a3976876a11e0207c36939f25e7609b0c185c0ed6f9de058f5fa3eb609b4cc88eafcdeb43986e291e90c9d3851dc77c9c3dc96870a9837dd276f277443af4a36a25fd5"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000051}, 0x24040095) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001840)='net/raw6\x00') preadv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x2, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x25, '\x00', @st={0x4, [{0x3, @svalue=0x5d7cbccb}, {0x1, @uvalue=0x7fff}, {0x2, @svalue=0x800}, {0x2, @uvalue=0x7}]}, 0xe8}, {0x45, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x0, @svalue=0x80000002}, {0x1, @svalue=0x5}, {0x1, @uvalue=0xfffffffffffffff8}]}, 0x4100f467}, {0x22, '\x00', @data=0x9fe, 0x7}, {0x2e, '\x00', @st={0x4, [{0x3, @svalue=0x1008}, {0x2, @svalue=0x6}, {0x3, @uvalue=0x6}, {0x3, @uvalue=0x3}]}, 0x7}]}) 14m38.405321809s ago: executing program 6 (id=4325): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r1}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x0, 0x0, 0x2, 0xb, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 14m38.200839502s ago: executing program 6 (id=4327): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 14m38.052777751s ago: executing program 6 (id=4328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8041) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) 14m36.758535763s ago: executing program 6 (id=4330): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r7, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r8, 0x0, r9}) write(r0, &(0x7f0000000000)='3', 0x4e) 14m35.844369917s ago: executing program 6 (id=4333): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x2a0, 0x0}}], 0xffffff80, 0x0) 14m20.399508683s ago: executing program 44 (id=4333): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x2a0, 0x0}}], 0xffffff80, 0x0) 7m39.220821697s ago: executing program 8 (id=5440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m38.746943466s ago: executing program 8 (id=5444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) 7m38.024349015s ago: executing program 8 (id=5451): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='oom_score_adj\x00') write$sysctl(r1, 0x0, 0x0) 7m37.859837797s ago: executing program 8 (id=5452): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './cgroup.cpu/memory.limit_in_bytes\x00'}) sendmsg$NFT_BATCH(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xd8, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xc1, 0x7, 0x1, 0x0, "1a432d838dfc523f0a9132309e781b83d3f4f68d96d8fff7ed9a495167e582e350909ab1dfd76316dfdf0a6154c0de9643897d7eccc7ba296ed086ff4481e150326fec9353ba9b37279bc25f510cbacd998ebbd80d69e54965c02a8246950000a111582c688e3f05ddc10d333791e29df02dfcdce2da55fa1484a6a02a2f9ef4e4aa63e3b8b3a0124f66c8245c10972eef4533a11bd2bc476f0edbfe24a9a1a737fd5ecde8609957c6773f3fa067f8a7177c607e0a081759b3b274e3ae"}]}, @NFT_MSG_DELSET={0x780, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_DESC={0x548, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x218}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x140, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe857}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f603561}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1740}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b18}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x180}, @NFTA_SET_DESC_CONCAT={0x1b8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf1f7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3bc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x54}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc5af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8282}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x1e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x196d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1467}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x29df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd09}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x369e}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x87e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb7e3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x33e8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}]}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x16c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xd5, 0xc, "d69297741a16f54660ca4a131ba1b16363c6e1645a701882579522500f6c205e09bb08b108b35a52730a372597b4535c4ba1c14de592f57b9d2ac4801b0370fdff1f705d8c9b2b64b96ed0cba91f54c22390c576b880d52a08cbfe449d6bdd2b6fca34552c2de25582b27f4a01a1c85bfac8ff3f4c4013bf46bc3097b4c6e5743f45bcfb59c3ac20781901abc130c8cbbd9c4019b72a710503c18794d8f212da468c670404b0d78dc540d8c8ea422ebf5445e3c5e410d8f4216f54dae1e655826b1a56a0f4db703ca5e96aec89b8796bc1"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa40}, 0x1, 0x0, 0x0, 0x20040800}, 0x90) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 7m34.09091852s ago: executing program 8 (id=5465): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000020605000000005f0987357913e83029c1a39d51027a00000000000000000005e9"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d003a0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 7m33.800667215s ago: executing program 8 (id=5467): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141882, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x9, 0x0, 0x6, 0x5, 0x49}, 0x0, &(0x7f00000002c0)={0x9, 0x80000001, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x10, 0x80001006, 0x3}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs(0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x50, 0x1, 0xfffffffa, 0x64, 0x8]}, &(0x7f0000000000)=0x54) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100003e4", @ANYRES32=0x0, @ANYBLOB="83000400000000002800128008000100736974001c00028006000d000900000008000300e000000106000e0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) 7m18.442633725s ago: executing program 45 (id=5467): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141882, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x9, 0x0, 0x6, 0x5, 0x49}, 0x0, &(0x7f00000002c0)={0x9, 0x80000001, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x10, 0x80001006, 0x3}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs(0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x50, 0x1, 0xfffffffa, 0x64, 0x8]}, &(0x7f0000000000)=0x54) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100003e4", @ANYRES32=0x0, @ANYBLOB="83000400000000002800128008000100736974001c00028006000d000900000008000300e000000106000e0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) 2m7.19082178s ago: executing program 3 (id=6396): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}], 0x1}, 0x40080) 2m6.845181276s ago: executing program 3 (id=6400): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x3, 0xffffffff}], 'M6U'}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x5f, 0x2e, 0x61, 0x2e, 0x61, 0x5f, 0x0, 0x10]}}, &(0x7f0000001b00)=""/3, 0x4a, 0x3, 0x1, 0x5}, 0x28) 2m6.579766337s ago: executing program 3 (id=6402): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m6.459459027s ago: executing program 3 (id=6403): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 2m6.405553746s ago: executing program 3 (id=6404): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x10f7, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd673c673910c121"], 0x0) 2m4.033946899s ago: executing program 3 (id=6418): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) 2m3.536245471s ago: executing program 46 (id=6418): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) 15.697446594s ago: executing program 4 (id=6712): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="230005000100ef", 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1\x00'}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@private=0xa010102, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x1}, 0x3c) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) 14.618504556s ago: executing program 7 (id=6718): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) open$dir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x400000, 0x82) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200001, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', r2, &(0x7f00000003c0)='./sys\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 13.249761901s ago: executing program 7 (id=6720): syz_clone(0x8100000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffe, {0x1, 0xf0, 0x2}, 0xff}, 0x18) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="0000440500f500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201505000000f1d4614ed23628302b12b0bbf62affe331c6b6d6560cb7b8716311963bd755baee35b2872a9ae8126ff91332eeec820f3c96a1590cd0fd3470bde5cc1dc2e349e6ad4ab014f7ca74906f09ac1d1b5466f290d3c8bc95fcd1bd46"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') sendmsg$nl_generic(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 9.378503002s ago: executing program 4 (id=6728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x1c786f53}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 9.156469705s ago: executing program 7 (id=6730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 7.603828608s ago: executing program 1 (id=6733): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r4, &(0x7f0000000040)=0xfffffffffffffffd, r3, 0x0, 0x800000000ff, 0x0) syz_open_pts(r3, 0x20000) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000380)=0x8, &(0x7f00000003c0)=0x2) ioctl(0xffffffffffffffff, 0x1, 0x0) 7.508483995s ago: executing program 4 (id=6734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000fedbdf2503000000580001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 7.032116589s ago: executing program 4 (id=6736): socket$nl_generic(0x10, 0x3, 0x10) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000002d242e580c554568ee9d45af2512e9", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf2501000000000000000841000000140006001100087564703a73797a300000000090d77d6bf168ea85c3a80b40e9effed09f7a1c558fd886584c6d1500cad162ffbb95d5bc814c386e7f1591d0b7a78ad1ccd30cae01e511556799bddd9fd426b788e7dc3b158b30bb8ae4a3976876a11e0207c36939f25e7609b0c185c0ed6f9de058f5fa3eb609b4cc88eafcdeb43986e291e90c9d3851dc77c9c3dc96870a9837dd276f277443af4a36a25fd5"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000051}, 0x24040095) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001840)='net/raw6\x00') preadv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x2, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x25, '\x00', @st={0x4, [{0x3, @svalue=0x5d7cbccb}, {0x1, @uvalue=0x7fff}, {0x2, @svalue=0x800}, {0x2, @uvalue=0x7}]}, 0xe8}, {0x45, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x0, @svalue=0x80000002}, {0x1, @svalue=0x5}, {0x1, @uvalue=0xfffffffffffffff8}]}, 0x4100f467}, {0x22, '\x00', @data=0x9fe, 0x7}, {0x2e, '\x00', @st={0x4, [{0x3, @svalue=0x1008}, {0x2, @svalue=0x6}, {0x3, @uvalue=0x6}, {0x3, @uvalue=0x3}]}, 0x7}]}) 6.893707741s ago: executing program 1 (id=6738): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88", 0x3}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 6.882072104s ago: executing program 9 (id=6419): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e761101652500028d45", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.282179327s ago: executing program 0 (id=6739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) mmap(&(0x7f00003e6000/0x1000)=nil, 0x1000, 0x3000002, 0x10010, 0xffffffffffffffff, 0xf30cc000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c, 0x0, 0x0, 0x0, 0xfc25}}], 0x1, 0x0) 6.184412033s ago: executing program 1 (id=6740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0), &(0x7f00000004c0), 0x6375, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x39, &(0x7f0000000640)=ANY=[], 0x0) 4.970141929s ago: executing program 0 (id=6741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0x0) 4.676192695s ago: executing program 9 (id=6742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000"], 0x9c}}, 0x0) 4.564399739s ago: executing program 0 (id=6743): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) 4.421452711s ago: executing program 7 (id=6744): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xaaf, 0x7, 0x1}, {{0x3}, {0x2, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) 4.402894603s ago: executing program 9 (id=6745): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 4.349478975s ago: executing program 4 (id=6746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000fedbdf2503000000580001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 4.341834419s ago: executing program 0 (id=6747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100), 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r3}, 0x38) 4.323153914s ago: executing program 1 (id=6748): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) 3.000928805s ago: executing program 7 (id=6749): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{0x0}], 0x1}, 0x40080) 2.857752988s ago: executing program 9 (id=6750): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88", 0x3}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 2.667025678s ago: executing program 1 (id=6751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) mmap(&(0x7f00003e6000/0x1000)=nil, 0x1000, 0x3000002, 0x10010, 0xffffffffffffffff, 0xf30cc000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c, 0x0, 0x0, 0x0, 0xfc25}}], 0x1, 0x0) 2.250729201s ago: executing program 4 (id=6752): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) open$dir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x400000, 0x82) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200001, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1b7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', r2, &(0x7f00000003c0)='./sys\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, 0x0) 1.84275313s ago: executing program 0 (id=6753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0x0) 968.41995ms ago: executing program 9 (id=6754): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000180)={0x8, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) read$msr(r0, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0xd1, "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"}) 870.147085ms ago: executing program 0 (id=6755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000"], 0x9c}}, 0x0) 315.212854ms ago: executing program 1 (id=6756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 307.276134ms ago: executing program 7 (id=6757): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="230005000100ef", 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1\x00'}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 9 (id=6758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0), &(0x7f00000004c0), 0x6375, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x39, &(0x7f0000000640)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 1.857169][T23575] usb 1-1: Using ep0 maxpacket: 32 [ 2261.858067][T23575] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2261.877898][T23575] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 2261.877976][T23575] usb 1-1: config 0 has no interface number 0 [ 2261.878023][T23575] usb 1-1: config 0 interface 184 has no altsetting 0 [ 2261.898144][T23575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.898169][T23575] usb 1-1: Product: syz [ 2261.898185][T23575] usb 1-1: Manufacturer: syz [ 2261.898200][T23575] usb 1-1: SerialNumber: syz [ 2261.962249][T23575] usb 1-1: config 0 descriptor?? [ 2262.217068][T17973] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2262.387250][T17973] usb 4-1: Using ep0 maxpacket: 32 [ 2262.411334][T17973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2262.411424][T17973] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2262.413411][T17973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2262.413562][T17973] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2262.452388][T17973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.458754][T17973] usb 4-1: Product: syz [ 2262.458775][T17973] usb 4-1: Manufacturer: syz [ 2262.458792][T17973] usb 4-1: SerialNumber: syz [ 2263.133543][T17973] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2263.154070][T17973] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2263.316226][T27777] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5919'. [ 2263.551480][T17973] usb 4-1: USB disconnect, device number 78 [ 2263.973049][T27783] 9p: Bad value for 'wfdno' [ 2264.230477][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2264.241514][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2264.242040][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2264.242068][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2264.242090][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2264.242109][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2264.242370][T23575] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 2264.317480][T23575] usb 1-1: USB disconnect, device number 23 [ 2265.734463][T27808] netlink: 'syz.7.5927': attribute type 10 has an invalid length. [ 2265.972845][T27808] bridge0: port 2(bridge_slave_1) entered blocking state [ 2265.973791][T27808] bridge0: port 2(bridge_slave_1) entered listening state [ 2265.989630][T27808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2265.990121][T27808] bridge0: port 1(bridge_slave_0) entered listening state [ 2266.076356][T27808] bridge0: entered promiscuous mode [ 2266.144852][T27808] : (slave bridge0): Enslaving as an active interface with an up link [ 2266.167090][T17973] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2266.317099][T17973] usb 1-1: Using ep0 maxpacket: 32 [ 2266.323524][T17973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2266.323580][T17973] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2266.324910][T17973] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2266.324956][T17973] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2266.356595][T17973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.356664][T17973] usb 1-1: Product: syz [ 2266.356717][T17973] usb 1-1: Manufacturer: syz [ 2266.356757][T17973] usb 1-1: SerialNumber: syz [ 2266.624832][T27815] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5930'. [ 2266.714259][T17973] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2266.715198][T17973] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2266.924800][T27822] fuse: Unknown parameter 'use00000000000000000000' [ 2266.972560][T17973] usb 1-1: USB disconnect, device number 24 [ 2267.587583][T23575] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 2267.918668][T23575] usb 8-1: Using ep0 maxpacket: 8 [ 2267.943568][T23575] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2268.094650][T23575] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.094680][T23575] usb 8-1: Product: syz [ 2268.094696][T23575] usb 8-1: Manufacturer: syz [ 2268.094712][T23575] usb 8-1: SerialNumber: syz [ 2268.220763][T23575] usb 8-1: config 0 descriptor?? [ 2268.244288][T23575] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2268.547920][T27838] FAULT_INJECTION: forcing a failure. [ 2268.547920][T27838] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.569147][T27838] CPU: 0 UID: 0 PID: 27838 Comm: syz.3.5938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2268.569181][T27838] Tainted: [L]=SOFTLOCKUP [ 2268.569190][T27838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2268.569203][T27838] Call Trace: [ 2268.569212][T27838] [ 2268.569221][T27838] dump_stack_lvl+0xe8/0x150 [ 2268.569258][T27838] should_fail_ex+0x46b/0x600 [ 2268.569288][T27838] should_failslab+0xa8/0x100 [ 2268.569322][T27838] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 2268.569352][T27838] ? alloc_vfsmnt+0xe6/0x410 [ 2268.569376][T27838] ? alloc_vfsmnt+0xe6/0x410 [ 2268.569407][T27838] kstrdup+0x42/0x100 [ 2268.569438][T27838] alloc_vfsmnt+0xe6/0x410 [ 2268.569468][T27838] clone_mnt+0x4b/0x9b0 [ 2268.569502][T27838] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2268.569532][T27838] copy_tree+0xde/0x940 [ 2268.569558][T27838] ? rwbase_write_lock+0x550/0x720 [ 2268.569595][T27838] copy_mnt_ns+0x3de/0xcc0 [ 2268.569620][T27838] ? rcu_is_watching+0x16/0xb0 [ 2268.569651][T27838] ? __pfx_copy_mnt_ns+0x10/0x10 [ 2268.569666][T27838] ? create_new_namespaces+0x33/0x6b0 [ 2268.569714][T27838] ? create_new_namespaces+0x33/0x6b0 [ 2268.569751][T27838] create_new_namespaces+0xcf/0x6b0 [ 2268.569785][T27838] ? bpf_lsm_capable+0x9/0x20 [ 2268.569812][T27838] ? security_capable+0x7e/0x2c0 [ 2268.569849][T27838] unshare_nsproxy_namespaces+0x149/0x190 [ 2268.569883][T27838] ksys_unshare+0x5a7/0x950 [ 2268.569923][T27838] ? __pfx_ksys_unshare+0x10/0x10 [ 2268.569961][T27838] ? rcu_is_watching+0x16/0xb0 [ 2268.570005][T27838] __x64_sys_unshare+0x38/0x50 [ 2268.570038][T27838] do_syscall_64+0x166/0x520 [ 2268.570064][T27838] ? trace_irq_disable+0x3b/0x140 [ 2268.570094][T27838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2268.570118][T27838] ? clear_bhb_loop+0x70/0xc0 [ 2268.570147][T27838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2268.570171][T27838] RIP: 0033:0x7f79ea19e159 [ 2268.570194][T27838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2268.570213][T27838] RSP: 002b:00007f79e83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2268.570238][T27838] RAX: ffffffffffffffda RBX: 00007f79ea425fa0 RCX: 00007f79ea19e159 [ 2268.570256][T27838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 2268.570271][T27838] RBP: 00007f79ea235024 R08: 0000000000000000 R09: 0000000000000000 [ 2268.570286][T27838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2268.570301][T27838] R13: 00007f79ea426038 R14: 00007f79ea425fa0 R15: 00007fff4b1ad848 [ 2268.570336][T27838] [ 2268.698909][T23575] gspca_sonixj: reg_r err -32 [ 2268.699019][T23575] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 2269.389318][T27849] fuse: Unknown parameter 'use00000000000000000000' [ 2269.497129][T27853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5943'. [ 2269.829199][T27706] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.836616][T27706] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.836806][T27706] bridge_slave_0: entered allmulticast mode [ 2269.852541][T27706] bridge_slave_0: entered promiscuous mode [ 2269.861868][T27706] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.862979][T27706] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.863145][T27706] bridge_slave_1: entered allmulticast mode [ 2269.865567][T27706] bridge_slave_1: entered promiscuous mode [ 2269.866903][T27427] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2269.974253][T27427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2270.253920][T26879] usb 8-1: USB disconnect, device number 68 [ 2270.579171][T27427] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2270.625949][T27874] netlink: 'syz.7.5950': attribute type 10 has an invalid length. [ 2270.696539][T27427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2270.750826][T27874] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.758649][T27874] bridge0: port 1(bridge_slave_0) entered disabled state [ 2270.764879][T27427] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2270.822154][T27427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2270.849178][T27706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2270.866818][T27427] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2270.967784][T27427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2270.980105][T27706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2272.557137][T14463] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2274.047622][T27706] team0: Port device team_slave_0 added [ 2274.086549][T27706] team0: Port device team_slave_1 added [ 2274.277453][T27706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2274.277544][T27706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2274.277614][T27706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2274.324733][T27706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2274.326632][T27706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2274.326723][T27706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2275.579972][T27706] hsr_slave_0: entered promiscuous mode [ 2275.590070][T27706] hsr_slave_1: entered promiscuous mode [ 2275.623754][T27706] debugfs: 'hsr0' already exists in 'hsr' [ 2275.629747][T27706] Cannot create hsr debugfs directory [ 2275.901421][T27912] autofs: Unknown parameter 'fd0x0000000000000000' [ 2276.675123][T27928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5967'. [ 2276.719294][T14463] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2276.918156][T27930] »»»»»»: renamed from vlan0 [ 2277.495200][T27941] autofs: Unknown parameter 'fd0x0000000000000000' [ 2278.209816][T23575] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2278.377156][T23575] usb 1-1: Using ep0 maxpacket: 16 [ 2278.383384][T23575] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2278.400855][T23575] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 2278.412596][T23575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.420823][T23575] usb 1-1: Product: syz [ 2278.420845][T23575] usb 1-1: Manufacturer: syz [ 2278.420863][T23575] usb 1-1: SerialNumber: syz [ 2278.453778][T23575] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2278.460247][T23575] r8152-cfgselector 1-1: config 0 descriptor?? [ 2278.738674][T27427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2278.924130][T23247] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 2278.943263][T15644] bridge_slave_1: left allmulticast mode [ 2278.943350][T15644] bridge_slave_1: left promiscuous mode [ 2278.944543][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.138881][T15644] bridge_slave_0: left allmulticast mode [ 2279.138985][T15644] bridge_slave_0: left promiscuous mode [ 2279.139717][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.677190][T23575] usb 8-1: new full-speed USB device number 69 using dummy_hcd [ 2279.861039][T27962] autofs: Unknown parameter 'fd0x0000000000000000' [ 2279.889456][T23575] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2279.900316][T23575] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 2279.900346][T23575] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.900368][T23575] usb 8-1: config 0 has no interface number 0 [ 2279.931582][T23575] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.939711][T23575] usb 8-1: Product: syz [ 2279.939733][T23575] usb 8-1: Manufacturer: syz [ 2279.939749][T23575] usb 8-1: SerialNumber: syz [ 2279.963030][T23575] usb 8-1: config 0 descriptor?? [ 2280.307747][T23575] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 2280.315794][T23575] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 82 [ 2280.325957][T23575] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 2280.335052][T23575] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 2280.335118][T23575] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 2280.368105][T23575] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2280.380272][T23575] usb 8-1: USB disconnect, device number 69 [ 2280.393397][T23575] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2280.404813][T23575] keyspan 8-1:0.133: device disconnected [ 2281.057973][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.929235][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.974103][T15644] bond0 (unregistering): Released all slaves [ 2283.322954][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.436126][T27996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5993'. [ 2283.976248][T14461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2283.998907][T14461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2284.016003][T14461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2284.021536][T14461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2284.049073][T14461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2284.258654][T15644] hsr_slave_0: left promiscuous mode [ 2284.298897][T15644] hsr_slave_1: left promiscuous mode [ 2284.305266][T15644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.338500][T15644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.558020][T15644] team0 (unregistering): Port device team_slave_1 removed [ 2285.640905][T15644] team0 (unregistering): Port device team_slave_0 removed [ 2286.269057][T14461] Bluetooth: hci3: command tx timeout [ 2287.990387][T28028] netlink: 'syz.3.6002': attribute type 10 has an invalid length. [ 2288.097094][T28028] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.104674][T28028] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.390578][T14461] Bluetooth: hci3: command tx timeout [ 2288.692055][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6006'. [ 2288.905872][T28045] 9p: Bad value for 'rfdno' [ 2290.446702][T14461] Bluetooth: hci3: command tx timeout [ 2291.557488][T28063] netlink: 'syz.0.6011': attribute type 10 has an invalid length. [ 2291.611245][T28063] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.622173][T28063] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.733650][T28063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2291.741017][T28063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2291.745389][T28063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.745538][T28063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2291.858348][T28063] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2292.037093][T20282] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 2292.203835][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6016'. [ 2292.207029][T20282] usb 8-1: Using ep0 maxpacket: 8 [ 2292.210323][T20282] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2292.231802][T20282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.231878][T20282] usb 8-1: Product: syz [ 2292.231913][T20282] usb 8-1: Manufacturer: syz [ 2292.231967][T20282] usb 8-1: SerialNumber: syz [ 2292.262467][T20282] usb 8-1: config 0 descriptor?? [ 2292.281224][T20282] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2292.422617][T28003] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.430090][T28003] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.430305][T28003] bridge_slave_0: entered allmulticast mode [ 2292.452764][T28003] bridge_slave_0: entered promiscuous mode [ 2292.506649][T28003] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.506812][T28003] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.507031][T14461] Bluetooth: hci3: command tx timeout [ 2292.507107][T28003] bridge_slave_1: entered allmulticast mode [ 2292.538346][T28003] bridge_slave_1: entered promiscuous mode [ 2292.713179][T28003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2292.737312][T28003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2292.771890][T20282] gspca_sonixj: reg_r err -32 [ 2292.772200][T20282] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 2293.155275][T28003] team0: Port device team_slave_0 added [ 2293.156383][T27706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2293.204509][T27706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2293.230883][T28003] team0: Port device team_slave_1 added [ 2293.239553][T27706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2293.425772][T27706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2295.117167][T17973] usb 8-1: USB disconnect, device number 70 [ 2295.317038][T26879] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 2295.478175][T26879] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2295.488855][T26879] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 2295.488879][T26879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2295.488898][T26879] usb 1-1: config 0 has no interface number 0 [ 2295.492054][T26879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.492080][T26879] usb 1-1: Product: syz [ 2295.492097][T26879] usb 1-1: Manufacturer: syz [ 2295.492113][T26879] usb 1-1: SerialNumber: syz [ 2295.592614][T26879] usb 1-1: config 0 descriptor?? [ 2296.138315][T26879] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 2296.147046][T26879] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 2296.160382][T26879] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 2296.168294][T26879] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 2296.168384][T26879] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 2296.191011][T26879] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2296.205710][T26879] usb 1-1: USB disconnect, device number 26 [ 2296.227121][T26879] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2296.241327][T26879] keyspan 1-1:0.133: device disconnected [ 2296.498753][T27706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2296.674993][T27706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2297.468144][T28120] FAULT_INJECTION: forcing a failure. [ 2297.468144][T28120] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.468254][T28120] CPU: 1 UID: 0 PID: 28120 Comm: syz.0.6029 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2297.468289][T28120] Tainted: [L]=SOFTLOCKUP [ 2297.468299][T28120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2297.468313][T28120] Call Trace: [ 2297.468323][T28120] [ 2297.468334][T28120] dump_stack_lvl+0xe8/0x150 [ 2297.468430][T28120] should_fail_ex+0x46b/0x600 [ 2297.468572][T28120] should_failslab+0xa8/0x100 [ 2297.468674][T28120] __kmalloc_cache_noprof+0xa1/0x680 [ 2297.468772][T28120] ? alloc_fdtable+0xc0/0x2c0 [ 2297.468867][T28120] ? alloc_fdtable+0xc0/0x2c0 [ 2297.468962][T28120] ? rt_spin_unlock+0x159/0x200 [ 2297.469062][T28120] alloc_fdtable+0xc0/0x2c0 [ 2297.469176][T28120] ? dup_fd+0x818/0xb20 [ 2297.469252][T28120] dup_fd+0x821/0xb20 [ 2297.469369][T28120] ? copy_fs_struct+0x1c8/0x270 [ 2297.469477][T28120] ksys_unshare+0x50f/0x950 [ 2297.469594][T28120] ? __pfx_ksys_unshare+0x10/0x10 [ 2297.469691][T28120] ? rcu_is_watching+0x16/0xb0 [ 2297.469791][T28120] __x64_sys_unshare+0x38/0x50 [ 2297.469834][T28120] do_syscall_64+0x166/0x520 [ 2297.469930][T28120] ? trace_irq_disable+0x3b/0x140 [ 2297.470020][T28120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2297.470071][T28120] ? clear_bhb_loop+0x70/0xc0 [ 2297.470146][T28120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2297.470208][T28120] RIP: 0033:0x7fc01268e159 [ 2297.470263][T28120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2297.470318][T28120] RSP: 002b:00007fc0108e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2297.470381][T28120] RAX: ffffffffffffffda RBX: 00007fc012915fa0 RCX: 00007fc01268e159 [ 2297.470431][T28120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 2297.470474][T28120] RBP: 00007fc012725024 R08: 0000000000000000 R09: 0000000000000000 [ 2297.470515][T28120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2297.470551][T28120] R13: 00007fc012916038 R14: 00007fc012915fa0 R15: 00007fff8d8f3d28 [ 2297.470644][T28120] [ 2297.689278][T27706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2297.998430][T27706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2298.010414][T28003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2298.010482][T28003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2298.010553][T28003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2299.237333][T17970] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 2299.388748][T17970] usb 8-1: Using ep0 maxpacket: 8 [ 2299.396384][T17970] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2299.414619][T17970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.422691][T17970] usb 8-1: Product: syz [ 2299.422711][T17970] usb 8-1: Manufacturer: syz [ 2299.422727][T17970] usb 8-1: SerialNumber: syz [ 2299.449275][T17970] usb 8-1: config 0 descriptor?? [ 2299.461392][T17970] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2299.870071][T17970] gspca_sonixj: reg_r err -32 [ 2299.876073][T17970] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 2300.225423][T28135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6035'. [ 2300.478948][T28003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2300.479034][T28003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2300.479110][T28003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2300.543035][T28143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6037'. [ 2301.107204][T20282] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2301.128675][T28003] hsr_slave_0: entered promiscuous mode [ 2301.135952][T28003] hsr_slave_1: entered promiscuous mode [ 2301.142745][T28003] debugfs: 'hsr0' already exists in 'hsr' [ 2301.149127][T28003] Cannot create hsr debugfs directory [ 2301.257320][T20282] usb 4-1: Using ep0 maxpacket: 32 [ 2301.260103][T20282] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2301.270278][T20282] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2301.270349][T20282] usb 4-1: config 0 has no interface number 0 [ 2301.270471][T20282] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2301.301061][T20282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.301146][T20282] usb 4-1: Product: syz [ 2301.301165][T20282] usb 4-1: Manufacturer: syz [ 2301.301203][T20282] usb 4-1: SerialNumber: syz [ 2301.341264][T20282] usb 4-1: config 0 descriptor?? [ 2302.368140][T23247] usb 8-1: USB disconnect, device number 71 [ 2302.549175][T28167] 9p: Bad value for 'wfdno' [ 2302.925734][T28174] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6044'. [ 2303.064357][T28177] 9pnet_fd: Insufficient options for proto=fd [ 2303.725923][T20282] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2303.727707][T20282] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2303.727729][T20282] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2303.727805][T20282] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2303.774778][T20282] usb 4-1: USB disconnect, device number 79 [ 2303.879928][T27706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2303.935811][T27706] 8021q: adding VLAN 0 to HW filter on device team0 [ 2303.954483][T15654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.954829][T15654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2304.011416][T15654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2304.011610][T15654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2304.438376][T20282] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 2305.067531][T20282] usb 8-1: Using ep0 maxpacket: 8 [ 2305.083731][T20282] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2305.107474][T20282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.113961][T20282] usb 8-1: Product: syz [ 2305.113981][T20282] usb 8-1: Manufacturer: syz [ 2305.113998][T20282] usb 8-1: SerialNumber: syz [ 2305.157148][T20282] usb 8-1: config 0 descriptor?? [ 2305.178687][T20282] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2306.031003][T20282] gspca_sonixj: reg_r err -32 [ 2306.031158][T20282] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 2306.066739][T28211] 9pnet_fd: Insufficient options for proto=fd [ 2306.087328][T15644] bridge_slave_1: left allmulticast mode [ 2306.087407][T15644] bridge_slave_1: left promiscuous mode [ 2306.088121][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.251464][T15644] bridge_slave_0: left allmulticast mode [ 2306.257844][T15644] bridge_slave_0: left promiscuous mode [ 2306.258103][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.434903][T28224] netlink: 'syz.0.6059': attribute type 10 has an invalid length. [ 2307.112823][T23247] usb 8-1: USB disconnect, device number 72 [ 2307.195139][T28227] FAULT_INJECTION: forcing a failure. [ 2307.195139][T28227] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2307.195233][T28227] CPU: 0 UID: 0 PID: 28227 Comm: syz.7.6060 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2307.195291][T28227] Tainted: [L]=SOFTLOCKUP [ 2307.195301][T28227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2307.195362][T28227] Call Trace: [ 2307.195396][T28227] [ 2307.195423][T28227] dump_stack_lvl+0xe8/0x150 [ 2307.195531][T28227] should_fail_ex+0x46b/0x600 [ 2307.195609][T28227] get_futex_key+0x1b4/0x1580 [ 2307.195697][T28227] ? kasan_save_stack+0x3e/0x60 [ 2307.195793][T28227] ? kasan_record_aux_stack+0xbd/0xd0 [ 2307.195847][T28227] ? call_rcu+0xee/0x8b0 [ 2307.195899][T28227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2307.195929][T28227] ? __pfx_get_futex_key+0x10/0x10 [ 2307.196036][T28227] futex_wake+0x119/0x600 [ 2307.196113][T28227] ? __pfx_futex_wake+0x10/0x10 [ 2307.196188][T28227] ? call_rcu+0x64d/0x8b0 [ 2307.196278][T28227] do_futex+0x458/0x4e0 [ 2307.196370][T28227] ? __pfx_do_futex+0x10/0x10 [ 2307.196452][T28227] ? blkcg_maybe_throttle_current+0x1a9/0xbd0 [ 2307.196551][T28227] __se_sys_futex+0x3a8/0x450 [ 2307.196646][T28227] ? __pfx_task_work_run+0x10/0x10 [ 2307.196715][T28227] ? __pfx___se_sys_futex+0x10/0x10 [ 2307.196767][T28227] ? rcu_is_watching+0x16/0xb0 [ 2307.196890][T28227] ? __x64_sys_futex+0x21/0xf0 [ 2307.196938][T28227] do_syscall_64+0x166/0x520 [ 2307.196995][T28227] ? trace_irq_disable+0x3b/0x140 [ 2307.197064][T28227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2307.197122][T28227] ? clear_bhb_loop+0x70/0xc0 [ 2307.197189][T28227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2307.197241][T28227] RIP: 0033:0x7f850d3be159 [ 2307.197291][T28227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2307.197338][T28227] RSP: 002b:00007f850b6160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2307.197406][T28227] RAX: ffffffffffffffda RBX: 00007f850d645fa8 RCX: 00007f850d3be159 [ 2307.197445][T28227] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f850d645fac [ 2307.197481][T28227] RBP: 00007f850d645fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 2307.197519][T28227] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2307.197557][T28227] R13: 00007f850d646038 R14: 00007ffc3a27fff0 R15: 00007ffc3a2800d8 [ 2307.197632][T28227] [ 2307.667921][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2307.787525][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2307.807097][ T5922] usb 8-1: new full-speed USB device number 73 using dummy_hcd [ 2307.871768][T15644] bond0 (unregistering): Released all slaves [ 2307.957942][ T5922] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2307.968990][ T5922] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 2307.970582][ T5922] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.970607][ T5922] usb 8-1: config 0 has no interface number 0 [ 2307.994913][T28224] bridge0: port 2(bridge_slave_1) entered disabled state [ 2307.995136][T28224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2308.018653][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.020358][ T5922] usb 8-1: Product: syz [ 2308.020378][ T5922] usb 8-1: Manufacturer: syz [ 2308.020396][ T5922] usb 8-1: SerialNumber: syz [ 2308.053932][ T5922] usb 8-1: config 0 descriptor?? [ 2308.622679][ T5922] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 2308.631608][ T5922] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 82 [ 2308.633899][ T5922] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 2308.634109][ T5922] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 2308.634209][ T5922] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 2308.670322][ T5922] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2308.682024][ T5922] usb 8-1: USB disconnect, device number 73 [ 2308.694435][ T5922] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2308.704870][ T5922] keyspan 8-1:0.133: device disconnected [ 2308.718439][T15644] hsr_slave_0: left promiscuous mode [ 2308.758790][T15644] hsr_slave_1: left promiscuous mode [ 2308.770384][T15644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2308.797775][T15644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2309.045644][T28242] 9pnet_fd: Insufficient options for proto=fd [ 2309.430583][T15644] team0 (unregistering): Port device team_slave_1 removed [ 2309.500656][T15644] team0 (unregistering): Port device team_slave_0 removed [ 2309.844690][T28253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6069'. [ 2310.477034][ T5922] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2310.637018][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 2310.646673][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2310.646732][ T5922] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2310.665557][ T5922] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2310.670989][ T5922] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2310.692001][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.695218][ T5922] usb 1-1: Product: syz [ 2310.695238][ T5922] usb 1-1: Manufacturer: syz [ 2310.695253][ T5922] usb 1-1: SerialNumber: syz [ 2310.753985][T27706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2311.182970][ T5922] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2311.191527][ T5922] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2311.345254][ T5922] usb 1-1: USB disconnect, device number 27 [ 2312.560817][T14463] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2312.656872][T14463] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2312.662791][T14463] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2312.695672][T14463] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2312.708061][T14463] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2313.008552][T28290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6079'. [ 2313.667064][T17973] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 2313.817115][T17973] usb 8-1: Using ep0 maxpacket: 32 [ 2313.823046][T17973] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2313.825402][T17973] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 2313.825427][T17973] usb 8-1: config 0 has no interface number 0 [ 2313.825476][T17973] usb 8-1: config 0 interface 12 has no altsetting 0 [ 2313.831120][T17973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.831173][T17973] usb 8-1: Product: syz [ 2313.831214][T17973] usb 8-1: Manufacturer: syz [ 2313.831273][T17973] usb 8-1: SerialNumber: syz [ 2313.899078][T17973] usb 8-1: config 0 descriptor?? [ 2314.040253][T23247] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2314.227163][T23247] usb 4-1: Using ep0 maxpacket: 32 [ 2314.232282][T23247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2314.232410][T23247] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2314.235574][T23247] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2314.235667][T23247] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2314.246215][T23247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.246290][T23247] usb 4-1: Product: syz [ 2314.246331][T23247] usb 4-1: Manufacturer: syz [ 2314.246349][T23247] usb 4-1: SerialNumber: syz [ 2314.647266][T23247] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2314.647700][T23247] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2314.779216][T23247] usb 4-1: USB disconnect, device number 80 [ 2314.832717][T14461] Bluetooth: hci2: command tx timeout [ 2316.647108][ T5922] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2316.691337][T17973] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2316.691431][T17973] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 2316.691460][T17973] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2316.691563][T17973] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 2316.738134][T17973] usb 8-1: USB disconnect, device number 74 [ 2316.807034][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 2316.813342][ T5922] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2316.814884][ T5922] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2316.814909][ T5922] usb 4-1: config 0 has no interface number 0 [ 2316.814956][ T5922] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2316.849261][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.857784][ T5922] usb 4-1: Product: syz [ 2316.857803][ T5922] usb 4-1: Manufacturer: syz [ 2316.857818][ T5922] usb 4-1: SerialNumber: syz [ 2316.886425][ T5922] usb 4-1: config 0 descriptor?? [ 2316.917316][T14461] Bluetooth: hci2: command tx timeout [ 2317.948445][T28333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6090'. [ 2318.298850][T28003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2318.368681][T28003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2318.908227][T28003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2318.951142][T28003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2318.987253][T14461] Bluetooth: hci2: command tx timeout [ 2319.009684][T28003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2319.295475][T28003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2320.122870][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2320.122952][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2320.125619][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2320.125693][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2320.125743][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2320.125792][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2320.126462][ T5922] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 2320.206364][ T5922] usb 4-1: USB disconnect, device number 81 [ 2320.399965][T28003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2320.487553][T28003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2320.527266][T17973] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 2320.677025][T17973] usb 8-1: Using ep0 maxpacket: 32 [ 2320.685028][T17973] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2320.685105][T17973] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2320.694109][T17973] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2320.694224][T17973] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2320.718331][T17973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.718384][T17973] usb 8-1: Product: syz [ 2320.718421][T17973] usb 8-1: Manufacturer: syz [ 2320.718460][T17973] usb 8-1: SerialNumber: syz [ 2321.067173][T14461] Bluetooth: hci2: command tx timeout [ 2321.132674][T17973] usb 8-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2321.136820][T17973] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2321.470746][T17973] usb 8-1: USB disconnect, device number 75 [ 2321.580305][T28282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2321.587737][T28282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.587876][T28282] bridge_slave_0: entered allmulticast mode [ 2321.683428][T28282] bridge_slave_0: entered promiscuous mode [ 2321.874089][T28282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.875792][T28282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2321.876251][T28282] bridge_slave_1: entered allmulticast mode [ 2321.884013][T28282] bridge_slave_1: entered promiscuous mode [ 2321.908736][T28376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6100'. [ 2322.097833][T28282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2322.253662][T28282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2322.316402][T28385] vlan2: entered promiscuous mode [ 2322.316472][T28385] dummy0: entered promiscuous mode [ 2322.473532][T26879] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 2322.628329][T26879] usb 8-1: Using ep0 maxpacket: 32 [ 2322.629975][T26879] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2322.637507][T26879] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 2322.637587][T26879] usb 8-1: config 0 has no interface number 0 [ 2322.637718][T26879] usb 8-1: config 0 interface 184 has no altsetting 0 [ 2322.667725][T26879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.667799][T26879] usb 8-1: Product: syz [ 2322.667818][T26879] usb 8-1: Manufacturer: syz [ 2322.667879][T26879] usb 8-1: SerialNumber: syz [ 2322.712800][T26879] usb 8-1: config 0 descriptor?? [ 2322.853545][T28282] team0: Port device team_slave_0 added [ 2322.877789][T28282] team0: Port device team_slave_1 added [ 2322.928411][T28003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2323.057378][T15644] bridge_slave_1: left allmulticast mode [ 2323.057452][T15644] bridge_slave_1: left promiscuous mode [ 2323.057758][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.310328][T15644] bridge_slave_0: left allmulticast mode [ 2323.314662][T15644] bridge_slave_0: left promiscuous mode [ 2323.322105][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.760274][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2324.839504][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2324.882108][T15644] bond0 (unregistering): Released all slaves [ 2325.212926][T26879] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2325.213015][T26879] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2325.214452][T26879] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2325.214494][T26879] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2325.214524][T26879] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2325.214543][T26879] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2325.215174][T26879] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 2325.298537][T26879] usb 8-1: USB disconnect, device number 76 [ 2325.559520][T28401] binder: 28400:28401 ioctl c0306201 0 returned -14 [ 2325.744209][T14461] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2325.803215][T28282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2325.803275][T28282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2325.803308][T28282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2325.856026][T28282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2325.856086][T28282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2325.856138][T28282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2326.013018][T26879] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 2326.167135][T26879] usb 8-1: Using ep0 maxpacket: 32 [ 2326.173357][T26879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2326.173411][T26879] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2326.173604][T15644] hsr_slave_0: left promiscuous mode [ 2326.174946][T26879] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2326.174990][T26879] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2326.210754][T26879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.210830][T26879] usb 8-1: Product: syz [ 2326.210875][T26879] usb 8-1: Manufacturer: syz [ 2326.210923][T26879] usb 8-1: SerialNumber: syz [ 2326.525128][T15644] hsr_slave_1: left promiscuous mode [ 2326.532208][T15644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2326.554099][T26879] usb 8-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2326.554955][T26879] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2327.409061][T15644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2327.615811][T26879] usb 8-1: USB disconnect, device number 77 [ 2327.624815][T28412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6111'. [ 2329.709083][T15644] team0 (unregistering): Port device team_slave_1 removed [ 2329.791760][T15644] team0 (unregistering): Port device team_slave_0 removed [ 2330.363875][T28003] 8021q: adding VLAN 0 to HW filter on device team0 [ 2330.527052][T20282] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 2330.617249][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 2330.618183][T13642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2330.662837][T28282] hsr_slave_0: entered promiscuous mode [ 2330.675778][T28282] hsr_slave_1: entered promiscuous mode [ 2330.677223][T20282] usb 8-1: Using ep0 maxpacket: 32 [ 2330.678184][T20282] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2330.679991][T20282] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 2330.680019][T20282] usb 8-1: config 0 has no interface number 0 [ 2330.680068][T20282] usb 8-1: config 0 interface 184 has no altsetting 0 [ 2330.684009][T28282] debugfs: 'hsr0' already exists in 'hsr' [ 2330.684037][T28282] Cannot create hsr debugfs directory [ 2330.688556][T20282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.688580][T20282] usb 8-1: Product: syz [ 2330.688595][T20282] usb 8-1: Manufacturer: syz [ 2330.688610][T20282] usb 8-1: SerialNumber: syz [ 2330.762310][T20282] usb 8-1: config 0 descriptor?? [ 2330.941559][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2330.977124][ T3381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.411418][T28438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6120'. [ 2331.760790][T28442] 8021q: VLANs not supported on nlmon0 [ 2332.312409][T28448] binder: 28446:28448 ioctl c0306201 0 returned -14 [ 2332.827264][ T5922] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2333.008664][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 2333.014996][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2333.015149][ T5922] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2333.018393][ T5922] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2333.018438][ T5922] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2333.024109][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.024178][ T5922] usb 4-1: Product: syz [ 2333.024204][ T5922] usb 4-1: Manufacturer: syz [ 2333.024219][ T5922] usb 4-1: SerialNumber: syz [ 2333.328315][T20282] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2333.339306][T20282] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2333.339833][T20282] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2333.339862][T20282] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2333.339883][T20282] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2333.339903][T20282] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2333.340154][T20282] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 2333.417504][T20282] usb 8-1: USB disconnect, device number 78 [ 2333.535886][ T5922] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2333.538287][ T5922] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2333.887365][T28457] syzkaller0: entered promiscuous mode [ 2333.893146][T28457] syzkaller0: entered allmulticast mode [ 2333.926104][ T5922] usb 4-1: USB disconnect, device number 82 [ 2334.170449][T28003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2334.315841][T28003] veth0_vlan: entered promiscuous mode [ 2334.332246][T28003] veth1_vlan: entered promiscuous mode [ 2334.393432][T28003] veth0_macvtap: entered promiscuous mode [ 2334.406346][T28003] veth1_macvtap: entered promiscuous mode [ 2334.453724][T28003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2334.475545][T28003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2334.568194][ T3381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.568716][ T3381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.568849][ T3381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.888240][T28461] netlink: 'syz.3.6126': attribute type 1 has an invalid length. [ 2335.207126][T28467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6129'. [ 2335.770458][T23247] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2335.927190][T23247] usb 4-1: Using ep0 maxpacket: 32 [ 2335.933416][T23247] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2335.935124][T23247] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2335.935152][T23247] usb 4-1: config 0 has no interface number 0 [ 2335.935203][T23247] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2335.985109][T23247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.993271][T23247] usb 4-1: Product: syz [ 2335.993289][T23247] usb 4-1: Manufacturer: syz [ 2335.993303][T23247] usb 4-1: SerialNumber: syz [ 2336.017465][T13642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.047991][T23247] usb 4-1: config 0 descriptor?? [ 2336.151686][T14461] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2336.477551][T28481] binder: 28480:28481 ioctl c0306201 0 returned -14 [ 2336.721912][T28195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2336.721976][T28195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2336.941485][T17973] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 2337.147045][T17973] usb 8-1: Using ep0 maxpacket: 32 [ 2337.154791][T17973] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2337.154842][T17973] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2337.156146][T17973] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2337.156192][T17973] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2337.199801][T17973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.199870][T17973] usb 8-1: Product: syz [ 2337.199888][T17973] usb 8-1: Manufacturer: syz [ 2337.199936][T17973] usb 8-1: SerialNumber: syz [ 2337.650710][T17973] usb 8-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2337.651360][T17973] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2337.941240][T17973] usb 8-1: USB disconnect, device number 79 [ 2338.042264][T15650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2338.042332][T15650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2338.616966][T23247] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2338.617035][T23247] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2338.617532][T23247] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2338.617559][T23247] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2338.617579][T23247] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2338.617599][T23247] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2338.617830][T23247] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 2338.721400][T23247] usb 4-1: USB disconnect, device number 83 [ 2340.079663][T14461] Bluetooth: Wrong link type (-22) [ 2340.509147][T28507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6139'. [ 2341.192212][T28282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2341.437518][T28282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2342.558789][T28282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2342.743528][T28282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2342.802992][T28282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2343.078929][T16191] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 2343.840452][T28282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2344.793430][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.813301][T28282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2344.949715][T16191] usb 8-1: Using ep0 maxpacket: 32 [ 2345.381447][T16191] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2345.389770][T16191] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2345.502268][T16191] usb 8-1: unable to read config index 0 descriptor/all [ 2345.509492][T16191] usb 8-1: can't read configurations, error -71 [ 2345.730395][T28282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2346.190043][T14461] Bluetooth: Wrong link type (-22) [ 2346.218244][T28282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2346.270843][T28282] 8021q: adding VLAN 0 to HW filter on device team0 [ 2346.295771][T15650] bridge0: port 1(bridge_slave_0) entered blocking state [ 2346.303607][T15650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2346.322110][T28547] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6150'. [ 2346.366793][T28195] bridge0: port 2(bridge_slave_1) entered blocking state [ 2346.371009][T28195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2347.298383][T13642] IPVS: starting estimator thread 0... [ 2347.388297][T28559] IPVS: using max 10 ests per chain, 24000 per kthread [ 2347.935064][T28282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2349.257063][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6157'. [ 2349.449691][T28580] vlan0: entered promiscuous mode [ 2349.456353][T28580] batadv0: entered promiscuous mode [ 2349.895209][T28282] veth0_vlan: entered promiscuous mode [ 2349.949466][T28282] veth1_vlan: entered promiscuous mode [ 2350.042385][T28590] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6160'. [ 2350.047256][T28282] veth0_macvtap: entered promiscuous mode [ 2350.078941][T28282] veth1_macvtap: entered promiscuous mode [ 2350.173340][T28593] fuse: Bad value for 'fd' [ 2350.215058][T28282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2350.284006][T28282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2351.747981][T13631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.751396][T13631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.757440][T13631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.987091][T13631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2352.462703][ T3381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2352.471950][ T3381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2352.674276][T23575] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2352.825757][T13642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2352.828525][T13642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2352.858394][T23575] usb 1-1: Using ep0 maxpacket: 32 [ 2352.862085][T23575] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2352.873407][T23575] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 2352.873472][T23575] usb 1-1: config 0 has no interface number 0 [ 2352.873589][T23575] usb 1-1: config 0 interface 184 has no altsetting 0 [ 2352.905228][T23575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2352.905295][T23575] usb 1-1: Product: syz [ 2352.905310][T23575] usb 1-1: Manufacturer: syz [ 2352.905324][T23575] usb 1-1: SerialNumber: syz [ 2352.974065][T23575] usb 1-1: config 0 descriptor?? [ 2353.141699][T28621] fuse: Bad value for 'fd' [ 2353.337022][T14461] Bluetooth: Wrong link type (-22) [ 2353.352282][T14461] Bluetooth: hci3: link tx timeout [ 2353.365748][T14461] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 2355.467048][T14461] Bluetooth: hci3: command 0x0406 tx timeout [ 2355.661700][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2355.661778][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2355.663147][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2355.663213][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2355.663256][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2355.663274][T23575] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2355.669857][T23575] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 2355.776942][T23575] usb 1-1: USB disconnect, device number 28 [ 2355.927390][T28641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5277'. [ 2356.459619][T14461] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2356.525031][T14461] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2356.530681][T14461] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2356.574383][T14461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2356.584114][T14461] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2357.167068][ T5922] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 2357.331505][ T5922] usb 8-1: Using ep0 maxpacket: 32 [ 2357.342293][ T5922] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2357.345001][ T5922] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 2357.345030][ T5922] usb 8-1: config 0 has no interface number 0 [ 2357.345081][ T5922] usb 8-1: config 0 interface 12 has no altsetting 0 [ 2357.384503][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.386221][ T5922] usb 8-1: Product: syz [ 2357.386240][ T5922] usb 8-1: Manufacturer: syz [ 2357.386257][ T5922] usb 8-1: SerialNumber: syz [ 2357.429760][ T5922] usb 8-1: config 0 descriptor?? [ 2358.277067][T23247] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2358.468864][T23247] usb 2-1: Using ep0 maxpacket: 32 [ 2359.160058][T14461] Bluetooth: hci5: command tx timeout [ 2359.168502][T14463] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2359.186748][T23247] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2359.193476][T23247] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2359.193535][T23247] usb 2-1: config 0 has no interface number 0 [ 2359.193611][T23247] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2359.201963][T23247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.202029][T23247] usb 2-1: Product: syz [ 2359.202074][T23247] usb 2-1: Manufacturer: syz [ 2359.202118][T23247] usb 2-1: SerialNumber: syz [ 2359.230301][T23247] usb 2-1: config 0 descriptor?? [ 2360.874107][ T5922] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2360.874323][ T5922] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 2360.874377][ T5922] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2360.874636][ T5922] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 2361.074201][ T5922] usb 8-1: USB disconnect, device number 82 [ 2361.237316][T14461] Bluetooth: hci5: command tx timeout [ 2361.696148][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6192'. [ 2361.787836][T23575] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2361.848917][T28713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6190'. [ 2361.947514][T23575] usb 5-1: Using ep0 maxpacket: 16 [ 2361.956476][T23575] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2361.972979][T23575] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 2361.987810][T23575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.988135][T23575] usb 5-1: Product: syz [ 2361.988150][T23575] usb 5-1: Manufacturer: syz [ 2361.988164][T23575] usb 5-1: SerialNumber: syz [ 2362.044516][T23575] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2362.051470][T23575] r8152-cfgselector 5-1: config 0 descriptor?? [ 2362.331483][T23247] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2362.331928][T23247] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2362.355977][T23247] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2362.359131][T23247] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2362.359155][T23247] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2362.359176][T23247] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2362.401134][T23247] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 2362.446643][T23247] usb 2-1: USB disconnect, device number 10 [ 2362.576221][T28716] FAULT_INJECTION: forcing a failure. [ 2362.576221][T28716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2362.589910][T28716] CPU: 1 UID: 0 PID: 28716 Comm: syz.1.6193 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2362.589949][T28716] Tainted: [L]=SOFTLOCKUP [ 2362.589958][T28716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2362.589973][T28716] Call Trace: [ 2362.589983][T28716] [ 2362.589993][T28716] dump_stack_lvl+0xe8/0x150 [ 2362.590035][T28716] should_fail_ex+0x46b/0x600 [ 2362.590068][T28716] _copy_from_user+0x2d/0xb0 [ 2362.590100][T28716] __sys_bpf+0x2e7/0xd90 [ 2362.590146][T28716] ? __pfx___sys_bpf+0x10/0x10 [ 2362.590182][T28716] ? do_futex+0x3e7/0x4e0 [ 2362.590242][T28716] ? ksys_write+0x248/0x270 [ 2362.590268][T28716] ? __pfx___se_sys_futex+0x10/0x10 [ 2362.590304][T28716] ? __pfx_ksys_write+0x10/0x10 [ 2362.590335][T28716] __x64_sys_bpf+0xba/0xd0 [ 2362.590367][T28716] do_syscall_64+0x166/0x520 [ 2362.590398][T28716] ? trace_irq_disable+0x3b/0x140 [ 2362.590426][T28716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2362.590450][T28716] ? clear_bhb_loop+0x70/0xc0 [ 2362.590479][T28716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2362.590503][T28716] RIP: 0033:0x7f9b0a98e159 [ 2362.590525][T28716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2362.590546][T28716] RSP: 002b:00007f9b08be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2362.590573][T28716] RAX: ffffffffffffffda RBX: 00007f9b0ac15fa0 RCX: 00007f9b0a98e159 [ 2362.590590][T28716] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 2362.590606][T28716] RBP: 00007f9b0aa25024 R08: 0000000000000000 R09: 0000000000000000 [ 2362.590621][T28716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2362.590636][T28716] R13: 00007f9b0ac16038 R14: 00007f9b0ac15fa0 R15: 00007fffdcac9fd8 [ 2362.590672][T28716] [ 2362.815598][T15646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.026696][T17970] r8152-cfgselector 5-1: USB disconnect, device number 66 [ 2363.311112][T14461] Bluetooth: hci5: command tx timeout [ 2364.295373][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6205'. [ 2364.304558][T23575] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2364.477065][T23575] usb 2-1: Using ep0 maxpacket: 32 [ 2364.483261][T23575] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2364.484800][T23575] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2364.484825][T23575] usb 2-1: config 0 has no interface number 0 [ 2364.484871][T23575] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2364.533236][T23575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.541444][T23575] usb 2-1: Product: syz [ 2364.541468][T23575] usb 2-1: Manufacturer: syz [ 2364.541486][T23575] usb 2-1: SerialNumber: syz [ 2364.564616][T23575] usb 2-1: config 0 descriptor?? [ 2365.011211][T15646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2365.191710][T28650] bridge0: port 1(bridge_slave_0) entered blocking state [ 2365.191977][T28650] bridge0: port 1(bridge_slave_0) entered disabled state [ 2365.192362][T28650] bridge_slave_0: entered allmulticast mode [ 2365.208943][T28650] bridge_slave_0: entered promiscuous mode [ 2365.322660][T28650] bridge0: port 2(bridge_slave_1) entered blocking state [ 2365.322915][T28650] bridge0: port 2(bridge_slave_1) entered disabled state [ 2365.323205][T28650] bridge_slave_1: entered allmulticast mode [ 2365.349975][T28650] bridge_slave_1: entered promiscuous mode [ 2365.376097][T28766] misc userio: Invalid payload size [ 2365.389911][T14461] Bluetooth: hci5: command tx timeout [ 2365.454639][T28759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6209'. [ 2365.707075][T26879] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2365.877946][T26879] usb 5-1: Using ep0 maxpacket: 16 [ 2365.896422][T26879] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2365.909687][T26879] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 2365.909758][T26879] usb 5-1: config 0 has no interface number 0 [ 2365.909808][T26879] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 58483, setting to 1024 [ 2365.974303][T26879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.975333][T26879] usb 5-1: Product: syz [ 2365.975351][T26879] usb 5-1: Manufacturer: syz [ 2365.975366][T26879] usb 5-1: SerialNumber: syz [ 2365.993381][T15646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.010181][T26879] usb 5-1: config 0 descriptor?? [ 2366.041220][T26879] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2366.204743][T28650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2366.783200][T28650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2367.685809][T15654] usb 5-1: Failed to submit usb control message: -110 [ 2367.687738][T15654] usb 5-1: unable to send the bmi data to the device: -110 [ 2367.687906][T15654] usb 5-1: unable to get target info from device [ 2367.687955][T15654] usb 5-1: could not get target info (-110) [ 2367.696086][T15654] usb 5-1: could not probe fw (-110) [ 2367.933808][T23575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2367.933884][T23575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2367.936078][T23575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2367.936147][T23575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2367.936192][T23575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2367.936247][T23575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2367.936827][T23575] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 2367.980425][T23575] usb 2-1: USB disconnect, device number 11 [ 2368.426218][T23575] usb 5-1: USB disconnect, device number 67 [ 2368.495950][T15646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.616631][T28650] team0: Port device team_slave_0 added [ 2368.620892][T28650] team0: Port device team_slave_1 added [ 2368.651606][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6221'. [ 2368.809443][T28800] »»»»»»: renamed from vlan0 (while UP) [ 2368.951086][T28650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2368.958226][T28650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2368.958257][T28650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2369.014500][T28650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2369.014568][T28650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2369.014622][T28650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2369.250048][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6224'. [ 2369.453521][T28650] hsr_slave_0: entered promiscuous mode [ 2369.469460][T28650] hsr_slave_1: entered promiscuous mode [ 2369.496181][T28650] debugfs: 'hsr0' already exists in 'hsr' [ 2369.496209][T28650] Cannot create hsr debugfs directory [ 2369.620268][T28812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6225'. [ 2371.613802][T28831] misc userio: Invalid payload size [ 2372.778423][T28689] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2372.948597][T28689] usb 2-1: Using ep0 maxpacket: 16 [ 2372.949444][T28689] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2372.952384][T28689] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 2372.952409][T28689] usb 2-1: config 0 has no interface number 0 [ 2372.952451][T28689] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 58483, setting to 1024 [ 2372.994893][T28689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.002997][T28689] usb 2-1: Product: syz [ 2373.003016][T28689] usb 2-1: Manufacturer: syz [ 2373.003033][T28689] usb 2-1: SerialNumber: syz [ 2373.028040][T28689] usb 2-1: config 0 descriptor?? [ 2373.096078][T28689] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2373.945550][T28854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6237'. [ 2373.945629][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6237'. [ 2374.278086][T15648] usb 2-1: Failed to submit usb control message: -110 [ 2374.295696][T15648] usb 2-1: unable to send the bmi data to the device: -110 [ 2374.295721][T15648] usb 2-1: unable to get target info from device [ 2374.295737][T15648] usb 2-1: could not get target info (-110) [ 2374.326776][T15648] usb 2-1: could not probe fw (-110) [ 2374.484714][T26879] usb 2-1: USB disconnect, device number 12 [ 2374.758834][T15646] bridge_slave_1: left allmulticast mode [ 2374.758905][T15646] bridge_slave_1: left promiscuous mode [ 2374.759201][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2376.659484][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6252'. [ 2378.650134][T15646] bridge_slave_0: left allmulticast mode [ 2378.656161][T15646] bridge_slave_0: left promiscuous mode [ 2378.656483][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2378.899349][T28897] misc userio: Invalid payload size [ 2379.172896][T23575] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2379.348660][T23575] usb 1-1: Using ep0 maxpacket: 16 [ 2379.351443][T23575] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2379.355619][T23575] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 2379.355690][T23575] usb 1-1: config 0 has no interface number 0 [ 2379.355873][T23575] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 58483, setting to 1024 [ 2379.417804][T23575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.417885][T23575] usb 1-1: Product: syz [ 2379.417929][T23575] usb 1-1: Manufacturer: syz [ 2379.417984][T23575] usb 1-1: SerialNumber: syz [ 2379.449572][T23575] usb 1-1: config 0 descriptor?? [ 2379.477264][T23575] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2380.244085][T15646]  (unregistering): (slave bridge0): Releasing backup interface [ 2380.464153][ T8441] usb 1-1: Failed to submit usb control message: -71 [ 2380.472450][T28689] usb 1-1: USB disconnect, device number 29 [ 2380.494271][ T8441] usb 1-1: unable to send the bmi data to the device: -71 [ 2380.494299][ T8441] usb 1-1: unable to get target info from device [ 2380.494317][ T8441] usb 1-1: could not get target info (-71) [ 2380.494454][ T8441] usb 1-1: could not probe fw (-71) [ 2380.937815][T15646]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2380.997729][T15646]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2381.040179][T15646]  (unregistering): Released all slaves [ 2381.061763][T15646] bond1 (unregistering): Released all slaves [ 2381.579134][T15646] tipc: Disabling bearer [ 2381.579331][T15646] tipc: Left network mode [ 2382.291929][T28923] misc userio: Invalid payload size [ 2382.347459][T15646] IPVS: stopping master sync thread 20404 ... [ 2382.567128][T23247] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2382.737889][T23247] usb 5-1: Using ep0 maxpacket: 16 [ 2382.744113][T23247] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2382.745956][T23247] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 2382.745984][T23247] usb 5-1: config 0 has no interface number 0 [ 2382.746033][T23247] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 58483, setting to 1024 [ 2382.786519][T23247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.794647][T23247] usb 5-1: Product: syz [ 2382.794669][T23247] usb 5-1: Manufacturer: syz [ 2382.794686][T23247] usb 5-1: SerialNumber: syz [ 2382.828752][T23247] usb 5-1: config 0 descriptor?? [ 2382.890343][T23247] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2384.257064][ T3381] usb 5-1: Failed to submit usb control message: -110 [ 2384.288628][ T3381] usb 5-1: unable to send the bmi data to the device: -110 [ 2384.288656][ T3381] usb 5-1: unable to get target info from device [ 2384.288672][ T3381] usb 5-1: could not get target info (-110) [ 2384.288804][ T3381] usb 5-1: could not probe fw (-110) [ 2384.337634][T23247] usb 5-1: USB disconnect, device number 68 [ 2384.807091][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2385.027646][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 2385.040702][ T5922] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2385.047040][ T5922] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2385.047075][ T5922] usb 2-1: config 0 has no interface number 0 [ 2385.047171][ T5922] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2385.062881][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.062906][ T5922] usb 2-1: Product: syz [ 2385.062920][ T5922] usb 2-1: Manufacturer: syz [ 2385.062934][ T5922] usb 2-1: SerialNumber: syz [ 2385.094354][ T5922] usb 2-1: config 0 descriptor?? [ 2387.411980][T28978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6276'. [ 2387.816721][ T5922] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2387.816865][ T5922] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2387.818126][ T5922] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2387.818299][ T5922] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2387.838116][ T5922] usb 2-1: USB disconnect, device number 13 [ 2388.217480][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6281'. [ 2389.741806][T29015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6292'. [ 2391.423475][T15646] hsr_slave_0: left promiscuous mode [ 2391.457165][T15646] hsr_slave_1: left promiscuous mode [ 2391.463494][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2391.463524][T15646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2391.558234][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2391.558313][T15646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2391.699213][ T37] audit: type=1400 audit(1788704644.559:248): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdiap" requested=l pid=29027 comm="syz.1.6297" path="/40/file1" dev="tmpfs" ino=229 [ 2391.843733][T15646] veth1_macvtap: left promiscuous mode [ 2391.849460][T15646] veth0_macvtap: left promiscuous mode [ 2391.849642][T15646] veth1_vlan: left promiscuous mode [ 2392.419912][T29048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6304'. [ 2392.697080][T29065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6306'. [ 2393.869735][T15646] team0 (unregistering): Port device team_slave_1 removed [ 2393.947893][T15646] team0 (unregistering): Port device team_slave_0 removed [ 2394.379934][T15646] team0 (unregistering): Port device dummy0 removed [ 2394.751967][T29091] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6317'. [ 2395.880066][T28650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2396.184831][T28650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2396.229943][T28650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2396.388662][T28650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2396.459072][T28650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2396.469687][T29125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6329'. [ 2396.489399][T29130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6330'. [ 2396.503419][T28650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2396.561815][T28650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2396.696122][T28650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2398.549785][T28650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2398.726007][T28650] 8021q: adding VLAN 0 to HW filter on device team0 [ 2398.861348][T29179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6345'. [ 2398.861474][T29179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6345'. [ 2398.861539][T29179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6345'. [ 2399.559384][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 2399.559631][ T8441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2399.565228][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 2399.565415][ T8441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2400.628029][T28650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2401.755330][T28650] veth0_vlan: entered promiscuous mode [ 2401.797255][T28650] veth1_vlan: entered promiscuous mode [ 2401.872267][T28650] veth0_macvtap: entered promiscuous mode [ 2401.907614][T28650] veth1_macvtap: entered promiscuous mode [ 2401.994795][T28650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2402.021037][T28650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2402.069638][ T8441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.880244][T15648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.885018][T15648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.887210][T15648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.933250][T29216] UDC core: g1: couldn't find an available UDC or it's busy [ 2405.099181][T15648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2405.101588][T15648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2405.346397][T15646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2405.346459][T15646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2405.812361][T29228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6361'. [ 2406.244020][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.787000][T29241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6357'. [ 2406.787111][T29241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6357'. [ 2406.787147][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6357'. [ 2409.070629][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6368'. [ 2409.540188][T14463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2410.109514][T14463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2410.129718][T14463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2410.131284][T14463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2410.133518][T14463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2410.571608][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6374'. [ 2410.571697][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6374'. [ 2410.571755][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6374'. [ 2413.017087][T14461] Bluetooth: hci4: command tx timeout [ 2414.493668][T29343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6394'. [ 2415.025911][T15644] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.069691][T14461] Bluetooth: hci4: command tx timeout [ 2416.517268][T29386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6410'. [ 2416.541599][T15644] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2416.749120][T22493] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2416.957198][T22493] usb 5-1: Using ep0 maxpacket: 16 [ 2416.964731][T22493] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2416.966286][T22493] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 2416.986278][T22493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.996688][T22493] usb 5-1: Product: syz [ 2416.996708][T22493] usb 5-1: Manufacturer: syz [ 2416.996725][T22493] usb 5-1: SerialNumber: syz [ 2417.021555][T22493] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2417.027917][T22493] r8152-cfgselector 5-1: config 0 descriptor?? [ 2417.147156][T14461] Bluetooth: hci4: command tx timeout [ 2417.525738][T22493] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2417.533581][T22493] r8152-cfgselector 5-1: No union descriptors [ 2417.550711][T22493] r8152-cfgselector 5-1: USB disconnect, device number 69 [ 2417.752928][T15644] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.995334][T29274] bridge0: port 1(bridge_slave_0) entered blocking state [ 2418.004754][T29274] bridge0: port 1(bridge_slave_0) entered disabled state [ 2418.005101][T29274] bridge_slave_0: entered allmulticast mode [ 2418.026244][T29274] bridge_slave_0: entered promiscuous mode [ 2418.376178][T14463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2418.496294][T14463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2418.510769][T14463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2418.552320][T14463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2418.555517][T14463] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2419.008540][T29423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6423'. [ 2419.181816][T15644] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.227007][T14461] Bluetooth: hci4: command tx timeout [ 2419.407746][T29274] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.415488][T29274] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.415676][T29274] bridge_slave_1: entered allmulticast mode [ 2419.432679][T29274] bridge_slave_1: entered promiscuous mode [ 2419.561478][T29274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2419.575899][T29274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2419.639361][T29274] team0: Port device team_slave_0 added [ 2419.648753][T29274] team0: Port device team_slave_1 added [ 2419.692202][T29274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2419.699309][T29274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2419.699343][T29274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2419.702017][T29274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2419.702039][T29274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2419.702070][T29274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2419.955005][T29274] hsr_slave_0: entered promiscuous mode [ 2419.972859][T29274] hsr_slave_1: entered promiscuous mode [ 2420.047451][T29431] 8021q: VLANs not supported on vcan0 [ 2420.815855][T14461] Bluetooth: hci1: command tx timeout [ 2421.021776][T29454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 2421.374592][T29461] 8021q: VLANs not supported on vcan0 [ 2422.329196][T15644] bridge_slave_1: left allmulticast mode [ 2422.329621][T15644] bridge_slave_1: left promiscuous mode [ 2422.329912][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2422.630416][T29475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6442'. [ 2423.386349][T14461] Bluetooth: hci1: command tx timeout [ 2424.282698][T15644] bridge_slave_0: left allmulticast mode [ 2424.282785][T15644] bridge_slave_0: left promiscuous mode [ 2424.283362][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.388013][T14461] Bluetooth: hci1: command tx timeout [ 2425.603446][T29493] 9p: Could not find request transport: fd0x0000000000000003 [ 2425.992299][T15644]  (unregistering): (slave bridge0): Releasing backup interface [ 2426.029577][T15644] bridge0 (unregistering): left promiscuous mode [ 2426.245634][T22493] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 2426.546637][T22493] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2426.683943][T15644]  (unregistering): left promiscuous mode [ 2426.685513][T15644] bond_slave_0: left promiscuous mode [ 2426.685744][T15644] bond_slave_1: left promiscuous mode [ 2426.733191][T15644]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2426.829357][T15644]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2426.870677][T15644]  (unregistering): Released all slaves [ 2426.954256][T29487] »»»»»»: renamed from vlan0 (while UP) [ 2427.922882][T15644] tipc: Disabling bearer [ 2427.923095][T15644] tipc: Left network mode [ 2429.063308][T14461] Bluetooth: hci1: command tx timeout [ 2429.491410][T15644] IPVS: stopping master sync thread 20126 ... [ 2429.627002][T22493] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2429.780866][T22493] usb 2-1: Using ep0 maxpacket: 32 [ 2429.782862][T22493] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2429.791818][T22493] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2429.791889][T22493] usb 2-1: config 0 has no interface number 0 [ 2429.792101][T22493] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2429.824450][T22493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.824528][T22493] usb 2-1: Product: syz [ 2429.824546][T22493] usb 2-1: Manufacturer: syz [ 2429.824591][T22493] usb 2-1: SerialNumber: syz [ 2429.855591][T22493] usb 2-1: config 0 descriptor?? [ 2430.906230][T29412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.917844][T29412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2430.918002][T29412] bridge_slave_0: entered allmulticast mode [ 2430.941262][T29412] bridge_slave_0: entered promiscuous mode [ 2431.399925][T29412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2431.407297][T29412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2431.407530][T29412] bridge_slave_1: entered allmulticast mode [ 2431.411674][T29412] bridge_slave_1: entered promiscuous mode [ 2431.529528][T29412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.280341][T22493] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2433.280434][T22493] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2433.282401][T22493] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2433.282432][T22493] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2433.282456][T22493] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2433.282477][T22493] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2433.282771][T22493] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 2433.788545][T22493] usb 2-1: USB disconnect, device number 14 [ 2434.562870][T29412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2436.127159][T15644] batadv0: left promiscuous mode [ 2436.497031][ T5922] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2436.646994][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 2436.653157][ T5922] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2436.679230][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.687527][ T5922] usb 2-1: Product: syz [ 2436.687548][ T5922] usb 2-1: Manufacturer: syz [ 2436.687566][ T5922] usb 2-1: SerialNumber: syz [ 2436.693545][ T5922] usb 2-1: config 0 descriptor?? [ 2436.719255][ T5922] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2437.585934][T15644] hsr_slave_0: left promiscuous mode [ 2437.630958][T15644] hsr_slave_1: left promiscuous mode [ 2437.635591][T15644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2437.635653][T15644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2437.706296][T15644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2437.708040][T15644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2437.813435][T15644] veth1_macvtap: left promiscuous mode [ 2437.813673][T15644] veth0_macvtap: left promiscuous mode [ 2437.855646][T15644] veth1_vlan: left promiscuous mode [ 2438.991577][ T5922] gspca_sonixj: reg_w1 err -110 [ 2439.067064][ T5922] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 2439.067092][T14463] Bluetooth: hci2: command 0x0406 tx timeout [ 2440.019413][T17973] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2440.090287][T22493] usb 2-1: USB disconnect, device number 15 [ 2440.167034][T17973] usb 1-1: Using ep0 maxpacket: 32 [ 2440.173195][T17973] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2440.174709][T17973] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 2440.174734][T17973] usb 1-1: config 0 has no interface number 0 [ 2440.174775][T17973] usb 1-1: config 0 interface 12 has no altsetting 0 [ 2440.189491][T17973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.189519][T17973] usb 1-1: Product: syz [ 2440.189535][T17973] usb 1-1: Manufacturer: syz [ 2440.189553][T17973] usb 1-1: SerialNumber: syz [ 2440.254287][T17973] usb 1-1: config 0 descriptor?? [ 2440.438089][T15644] team0 (unregistering): Port device team_slave_1 removed [ 2440.498385][T15644] team0 (unregistering): Port device team_slave_0 removed [ 2440.979133][T29412] team0: Port device team_slave_0 added [ 2441.162195][T29412] team0: Port device team_slave_1 added [ 2442.182007][T17973] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2442.183448][T17973] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 2442.183469][T17973] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2442.183551][T17973] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 2442.249609][T17973] usb 1-1: USB disconnect, device number 30 [ 2442.341013][T29412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2442.341082][T29412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2442.341107][T29412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2442.420827][T29412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2442.420921][T29412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2442.420972][T29412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2443.369345][T29412] hsr_slave_0: entered promiscuous mode [ 2443.373934][T29412] hsr_slave_1: entered promiscuous mode [ 2443.374833][T29412] debugfs: 'hsr0' already exists in 'hsr' [ 2443.374858][T29412] Cannot create hsr debugfs directory [ 2444.972956][T29654] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6500'. [ 2445.279630][T29656] 8021q: VLANs not supported on vcan0 [ 2445.701472][T15644] IPVS: stop unused estimator thread 0... [ 2447.102342][T29666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6506'. [ 2447.142841][T29666] 8021q: VLANs not supported on nlmon0 [ 2447.143292][T29274] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2447.196650][T29274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2447.215809][ T37] audit: type=1400 audit(1788704700.079:249): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdiap" requested=l pid=29657 comm="syz.4.6503" path="/87/file1" dev="tmpfs" ino=481 [ 2447.261608][T29274] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2447.421652][T29274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2447.488827][T16191] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 2447.497682][T29274] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2447.506673][T16191] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2447.541741][T29274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2448.976032][T15644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.113311][T29274] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2450.132101][T29274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2451.290795][T29683] 8021q: VLANs not supported on vcan0 [ 2452.001958][T29706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6516'. [ 2452.012736][T15644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.081795][T29706] 8021q: VLANs not supported on nlmon0 [ 2456.149992][T15644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.468889][T29722] 8021q: VLANs not supported on vcan0 [ 2456.870854][T29739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6528'. [ 2456.896115][T29739] 8021q: VLANs not supported on nlmon0 [ 2458.937098][T15644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.785372][T29274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2460.034058][T29274] 8021q: adding VLAN 0 to HW filter on device team0 [ 2460.072256][T15648] bridge0: port 1(bridge_slave_0) entered blocking state [ 2460.079751][T15648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2460.131029][T15650] bridge0: port 2(bridge_slave_1) entered blocking state [ 2460.132617][T15650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2460.332301][T29772] 9pnet_fd: Insufficient options for proto=fd [ 2463.701038][T29274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2464.068096][T29412] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2465.263783][T29412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2465.503214][T15644] bridge_slave_1: left allmulticast mode [ 2465.509062][T15644] bridge_slave_1: left promiscuous mode [ 2465.509349][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2465.613695][T15644] bridge_slave_0: left allmulticast mode [ 2465.613778][T15644] bridge_slave_0: left promiscuous mode [ 2465.614432][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2467.635683][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.177000][T29834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6559'. [ 2469.432529][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6564'. [ 2469.605504][T14463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2469.692136][T14463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2469.714920][T14463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2469.722709][T14463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2469.723381][T14463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2470.437284][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2470.519221][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2470.729381][T15644] bond0 (unregistering): Released all slaves [ 2471.723692][T29412] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2471.774973][T29412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2471.866981][T14461] Bluetooth: hci5: command tx timeout [ 2471.981161][T29847] 8021q: VLANs not supported on nlmon0 [ 2471.992904][T29412] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2472.055788][T29412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2472.802507][T29412] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2472.893959][T29859] UDC core: g1: couldn't find an available UDC or it's busy [ 2472.903524][T29412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2473.719379][T29412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2473.947951][T14461] Bluetooth: hci5: command tx timeout [ 2473.965006][T29412] 8021q: adding VLAN 0 to HW filter on device team0 [ 2473.984954][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 2473.985134][ T8441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2474.051805][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 2474.051922][ T8441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2475.431743][T29894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6577'. [ 2475.587411][T29894] 8021q: VLANs not supported on nlmon0 [ 2476.026968][T14461] Bluetooth: hci5: command tx timeout [ 2478.106958][T14461] Bluetooth: hci5: command tx timeout [ 2478.437506][T23247] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2478.518120][T29850] bridge0: port 1(bridge_slave_0) entered blocking state [ 2478.519456][T29850] bridge0: port 1(bridge_slave_0) entered disabled state [ 2478.522631][T29850] bridge_slave_0: entered allmulticast mode [ 2478.555881][T29850] bridge_slave_0: entered promiscuous mode [ 2478.586684][T29850] bridge0: port 2(bridge_slave_1) entered blocking state [ 2478.627011][T23247] usb 1-1: Using ep0 maxpacket: 32 [ 2478.636701][T23247] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2478.636754][T23247] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2478.655847][T23247] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 2478.666955][T23247] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2478.688325][T23247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.696454][T23247] usb 1-1: Product: syz [ 2478.696474][T23247] usb 1-1: Manufacturer: syz [ 2478.696491][T23247] usb 1-1: SerialNumber: syz [ 2478.781793][T29850] bridge0: port 2(bridge_slave_1) entered disabled state [ 2478.782188][T29850] bridge_slave_1: entered allmulticast mode [ 2478.815581][T29850] bridge_slave_1: entered promiscuous mode [ 2479.106807][T14463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2479.170429][T14463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2479.181791][T14463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2479.206109][T14463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2479.236458][T14463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2479.468568][T23247] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2479.471936][T23247] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2479.726504][T23247] usb 1-1: USB disconnect, device number 31 [ 2479.875015][T29935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6588'. [ 2480.237011][T15644] hsr_slave_0: left promiscuous mode [ 2480.277098][T15644] hsr_slave_1: left promiscuous mode [ 2480.283582][T15644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2480.283707][T15644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2480.329612][T15644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2480.329688][T15644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2480.464285][T15644] veth1_macvtap: left promiscuous mode [ 2480.473467][T15644] veth0_macvtap: left promiscuous mode [ 2480.500138][T15644] veth1_vlan: left promiscuous mode [ 2480.500278][T15644] veth0_vlan: left promiscuous mode [ 2481.307044][T14461] Bluetooth: hci4: command tx timeout [ 2481.567504][T15644] team0 (unregistering): Port device team_slave_1 removed [ 2481.630353][T15644] team0 (unregistering): Port device team_slave_0 removed [ 2481.931376][T29850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2481.950888][T29935] 8021q: VLANs not supported on nlmon0 [ 2482.534474][T29850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2483.203951][T29850] team0: Port device team_slave_0 added [ 2483.224849][T29850] team0: Port device team_slave_1 added [ 2483.387136][T14461] Bluetooth: hci4: command tx timeout [ 2483.430052][T29962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6596'. [ 2483.568776][T29850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2483.575940][T29850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2483.575972][T29850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2484.015355][T29850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2484.022479][T29850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2484.022516][T29850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2484.235319][T29975] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6601'. [ 2484.315263][T29977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6602'. [ 2484.369889][T29977] 8021q: VLANs not supported on nlmon0 [ 2484.653326][T29850] hsr_slave_0: entered promiscuous mode [ 2484.669693][T29850] hsr_slave_1: entered promiscuous mode [ 2484.674251][T29850] debugfs: 'hsr0' already exists in 'hsr' [ 2484.674275][T29850] Cannot create hsr debugfs directory [ 2484.859607][T29986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6605'. [ 2485.466948][T14461] Bluetooth: hci4: command tx timeout [ 2487.310466][T30013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6613'. [ 2487.546956][T14461] Bluetooth: hci4: command tx timeout [ 2487.586233][T30011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 2487.643570][T30013] vlan2: entered promiscuous mode [ 2488.000245][T30022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6614'. [ 2488.511357][T30022] 8021q: VLANs not supported on nlmon0 [ 2491.534566][T30054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6625'. [ 2491.702270][T30054] 8021q: VLANs not supported on nlmon0 [ 2491.940337][T30056] synth uevent: /bus/acpi: unknown uevent action string [ 2494.121497][T30088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6635'. [ 2494.566552][T30088] vlan0: entered promiscuous mode [ 2494.566631][T30088] dummy0: entered promiscuous mode [ 2494.876332][T30091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6636'. [ 2495.228854][T30091] 8021q: VLANs not supported on nlmon0 [ 2495.238034][T29925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2495.246008][T29925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2495.246206][T29925] bridge_slave_0: entered allmulticast mode [ 2495.264842][T29925] bridge_slave_0: entered promiscuous mode [ 2495.456971][T30095] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2495.477726][T29925] bridge0: port 2(bridge_slave_1) entered blocking state [ 2495.479446][T29925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2495.479639][T29925] bridge_slave_1: entered allmulticast mode [ 2495.507229][T29925] bridge_slave_1: entered promiscuous mode [ 2495.782277][T29925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2495.801274][T29925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2495.872918][T29925] team0: Port device team_slave_0 added [ 2495.888263][T29925] team0: Port device team_slave_1 added [ 2496.249295][T29925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2496.249374][T29925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2496.249429][T29925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2496.352236][T29925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2496.352253][T29925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2496.352282][T29925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2496.513684][T30121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6649'. [ 2497.058096][T30121] 8021q: VLANs not supported on nlmon0 [ 2498.144400][T29925] hsr_slave_0: entered promiscuous mode [ 2498.153663][T29925] hsr_slave_1: entered promiscuous mode [ 2498.170839][T29925] debugfs: 'hsr0' already exists in 'hsr' [ 2498.170956][T29925] Cannot create hsr debugfs directory [ 2499.287110][T15644] bridge_slave_1: left allmulticast mode [ 2499.292914][T15644] bridge_slave_1: left promiscuous mode [ 2499.293294][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.458814][T15644] bridge_slave_0: left allmulticast mode [ 2499.458896][T15644] bridge_slave_0: left promiscuous mode [ 2499.459588][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.788737][T15644] bridge_slave_1: left allmulticast mode [ 2499.788818][T15644] bridge_slave_1: left promiscuous mode [ 2499.789051][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2500.153495][T15644] bridge_slave_0: left allmulticast mode [ 2500.153570][T15644] bridge_slave_0: left promiscuous mode [ 2500.172873][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2501.628257][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2501.708396][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2501.753005][T15644] bond0 (unregistering): Released all slaves [ 2501.947714][T26879] page_pool_release_retry() stalled pool shutdown: id 252, 1 inflight 60 sec [ 2502.568645][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2502.647638][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2502.689807][T15644] bond0 (unregistering): Released all slaves [ 2504.598533][T15644] hsr_slave_0: left promiscuous mode [ 2504.637084][T15644] hsr_slave_1: left promiscuous mode [ 2504.644610][T15644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2504.680276][T15644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2504.879528][T15644] hsr_slave_0: left promiscuous mode [ 2504.920587][T15644] hsr_slave_1: left promiscuous mode [ 2504.929353][T15644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2504.962419][T15644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2506.060972][T15644] team0 (unregistering): Port device team_slave_1 removed [ 2506.147757][T15644] team0 (unregistering): Port device team_slave_0 removed [ 2507.287675][T15644] team0 (unregistering): Port device team_slave_1 removed [ 2507.349966][T15644] team0 (unregistering): Port device team_slave_0 removed [ 2507.645433][T29850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2507.804543][T29850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2507.914085][T29850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2507.955531][T29850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2508.057794][T29850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2508.119886][T29850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2508.176266][T29850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2508.345750][T29850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2509.807080][T23575] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2509.977480][T23575] usb 1-1: Using ep0 maxpacket: 32 [ 2509.978366][T23575] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2509.979782][T23575] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 2509.979824][T23575] usb 1-1: config 0 has no interface number 0 [ 2509.979865][T23575] usb 1-1: config 0 interface 12 has no altsetting 0 [ 2510.002265][T23575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.002288][T23575] usb 1-1: Product: syz [ 2510.002303][T23575] usb 1-1: Manufacturer: syz [ 2510.002317][T23575] usb 1-1: SerialNumber: syz [ 2510.048707][T23575] usb 1-1: config 0 descriptor?? [ 2511.721553][T29850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2511.823608][T29850] 8021q: adding VLAN 0 to HW filter on device team0 [ 2511.905547][T13631] bridge0: port 1(bridge_slave_0) entered blocking state [ 2511.905964][T13631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2512.046133][T15648] bridge0: port 2(bridge_slave_1) entered blocking state [ 2512.046374][T15648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2512.321507][T23575] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2512.329153][T23575] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 2512.329174][T23575] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2512.329247][T23575] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 2512.385323][T23575] usb 1-1: USB disconnect, device number 32 [ 2513.400816][T30270] netlink: 75 bytes leftover after parsing attributes in process `syz.1.6694'. [ 2513.656441][T29850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2513.841007][T29850] veth0_vlan: entered promiscuous mode [ 2513.855891][T29850] veth1_vlan: entered promiscuous mode [ 2513.900829][T29850] veth0_macvtap: entered promiscuous mode [ 2513.928637][T29850] veth1_macvtap: entered promiscuous mode [ 2514.081461][T29850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2514.131970][T29850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2514.831619][T30288] Bluetooth: MGMT ver 1.23 [ 2515.367104][T23247] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2515.568928][T23247] usb 2-1: Using ep0 maxpacket: 16 [ 2515.586433][T23247] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2515.611410][T23247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2515.629201][T23247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2515.639398][T23247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.679992][T23247] usb 2-1: config 0 descriptor?? [ 2516.249863][T23247] apple 0003:05AC:024B.0012: unknown global tag 0xe [ 2516.258989][T23247] apple 0003:05AC:024B.0012: item 0 1 1 14 parsing failed [ 2516.259659][T23247] apple 0003:05AC:024B.0012: parse failed [ 2516.259740][T23247] apple 0003:05AC:024B.0012: probe with driver apple failed with error -22 [ 2516.401322][ T3381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2516.401380][ T3381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2516.454510][T28689] usb 2-1: USB disconnect, device number 16 [ 2518.253624][T15648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2518.261572][T15648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2518.274652][T13631] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.286970][T22660] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.297824][T15654] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.307720][T15654] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.428277][T29925] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2518.596995][T17970] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2518.604889][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2518.609821][T29925] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2518.776944][T17970] usb 2-1: Using ep0 maxpacket: 32 [ 2518.783811][T17970] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2518.785295][T17970] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2518.785320][T17970] usb 2-1: config 0 has no interface number 0 [ 2518.785367][T17970] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2518.825028][T17970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.825086][T17970] usb 2-1: Product: syz [ 2518.825102][T17970] usb 2-1: Manufacturer: syz [ 2518.825117][T17970] usb 2-1: SerialNumber: syz [ 2518.866979][T17970] usb 2-1: config 0 descriptor?? [ 2521.275001][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2521.291918][T29925] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2521.339460][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2521.417133][T29925] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2521.452542][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2524.348990][T29925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2524.410711][T29925] 8021q: adding VLAN 0 to HW filter on device team0 [ 2524.451227][T15654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2524.451724][T15654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2524.537610][T15654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2524.537839][T15654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2524.711516][T17970] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2524.711604][T17970] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2524.711623][T17970] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2524.711703][T17970] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2524.739434][T17970] usb 2-1: USB disconnect, device number 17 [ 2526.166953][T23247] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2526.208684][T28689] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2526.317016][T23247] usb 2-1: Using ep0 maxpacket: 16 [ 2526.323222][T23247] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2526.348923][T23247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2526.356368][T23247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2526.356414][T23247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.388457][T28689] usb 5-1: Using ep0 maxpacket: 16 [ 2526.394284][T28689] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2526.396462][T28689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2526.396498][T28689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2526.396537][T28689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.438263][T29925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2526.451043][T23247] usb 2-1: config 0 descriptor?? [ 2526.470032][T28689] usb 5-1: config 0 descriptor?? [ 2527.197815][T28689] apple 0003:05AC:024B.0013: unknown global tag 0xe [ 2527.206180][T28689] apple 0003:05AC:024B.0013: item 0 1 1 14 parsing failed [ 2527.218991][T28689] apple 0003:05AC:024B.0013: parse failed [ 2527.225443][T28689] apple 0003:05AC:024B.0013: probe with driver apple failed with error -22 [ 2527.443504][T23247] usbhid 2-1:0.0: can't add hid device: -71 [ 2527.443825][T23247] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2527.464266][T23247] usb 2-1: USB disconnect, device number 18 [ 2527.472545][T29924] usb 5-1: USB disconnect, device number 70 [ 2528.680848][T29925] veth0_vlan: entered promiscuous mode [ 2528.698548][T29925] veth1_vlan: entered promiscuous mode [ 2528.804955][T29925] veth0_macvtap: entered promiscuous mode [ 2528.828412][T29925] veth1_macvtap: entered promiscuous mode [ 2528.856701][T23247] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 2529.131657][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.148128][T29925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2529.169234][T29925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2529.241957][T23247] usb 8-1: Using ep0 maxpacket: 32 [ 2529.340971][T30397] UDC core: g1: couldn't find an available UDC or it's busy [ 2530.170671][T23247] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2530.547555][T23247] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 2530.555780][T23247] usb 8-1: config 0 has no interface number 0 [ 2530.555837][T23247] usb 8-1: config 0 interface 12 has no altsetting 0 [ 2530.574752][T23247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.424143][T23247] usb 8-1: Product: syz [ 2531.424235][T23247] usb 8-1: Manufacturer: syz [ 2531.424318][T23247] usb 8-1: SerialNumber: syz [ 2531.460423][T23247] usb 8-1: config 0 descriptor?? [ 2532.017892][T21397] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.169162][T29924] page_pool_release_retry() stalled pool shutdown: id 264, 1 inflight 62 sec [ 2532.301947][T23247] usb 8-1: can't set config #0, error -71 [ 2532.387161][T23247] usb 8-1: USB disconnect, device number 83 [ 2532.417523][T15644] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.417964][T15644] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2533.610073][T15644] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2533.616728][ T1359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2533.616774][ T1359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2534.010453][ T1359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2534.010539][ T1359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2534.255604][T30427] FAULT_INJECTION: forcing a failure. [ 2534.255604][T30427] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.274345][T30427] CPU: 0 UID: 0 PID: 30427 Comm: syz.0.6735 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2534.274378][T30427] Tainted: [L]=SOFTLOCKUP [ 2534.274385][T30427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2534.274398][T30427] Call Trace: [ 2534.274408][T30427] [ 2534.274417][T30427] dump_stack_lvl+0xe8/0x150 [ 2534.274457][T30427] should_fail_ex+0x46b/0x600 [ 2534.274485][T30427] ? sock_alloc_inode+0x2c/0x1a0 [ 2534.274512][T30427] should_failslab+0xa8/0x100 [ 2534.274547][T30427] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 2534.274575][T30427] ? sock_alloc_inode+0x2c/0x1a0 [ 2534.274601][T30427] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2534.274622][T30427] sock_alloc_inode+0x2c/0x1a0 [ 2534.274643][T30427] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2534.274663][T30427] alloc_inode+0x6a/0x1b0 [ 2534.274695][T30427] __sock_create+0x12d/0x9d0 [ 2534.274727][T30427] __sys_socket+0xd6/0x1b0 [ 2534.274755][T30427] __x64_sys_socket+0x7a/0x90 [ 2534.274779][T30427] do_syscall_64+0x166/0x520 [ 2534.274805][T30427] ? trace_irq_disable+0x3b/0x140 [ 2534.274855][T30427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.274878][T30427] ? clear_bhb_loop+0x70/0xc0 [ 2534.274906][T30427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.274927][T30427] RIP: 0033:0x7fc01268e159 [ 2534.274948][T30427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2534.274966][T30427] RSP: 002b:00007fc0108e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2534.274989][T30427] RAX: ffffffffffffffda RBX: 00007fc012915fa0 RCX: 00007fc01268e159 [ 2534.275005][T30427] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2534.275019][T30427] RBP: 00007fc012725024 R08: 0000000000000000 R09: 0000000000000000 [ 2534.275033][T30427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2534.275046][T30427] R13: 00007fc012916038 R14: 00007fc012915fa0 R15: 00007fff8d8f3d28 [ 2534.275081][T30427] [ 2534.275092][T30427] socket: no more sockets [ 2537.565884][T30461] FAULT_INJECTION: forcing a failure. [ 2537.565884][T30461] name failslab, interval 1, probability 0, space 0, times 0 [ 2537.580221][T30461] CPU: 0 UID: 0 PID: 30461 Comm: syz.1.6748 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2537.580256][T30461] Tainted: [L]=SOFTLOCKUP [ 2537.580265][T30461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2537.580279][T30461] Call Trace: [ 2537.580290][T30461] [ 2537.580304][T30461] dump_stack_lvl+0xe8/0x150 [ 2537.580344][T30461] should_fail_ex+0x46b/0x600 [ 2537.580373][T30461] ? sock_alloc_inode+0x2c/0x1a0 [ 2537.580401][T30461] should_failslab+0xa8/0x100 [ 2537.580438][T30461] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 2537.580470][T30461] ? sock_alloc_inode+0x2c/0x1a0 [ 2537.580500][T30461] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2537.580524][T30461] sock_alloc_inode+0x2c/0x1a0 [ 2537.580549][T30461] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2537.580571][T30461] alloc_inode+0x6a/0x1b0 [ 2537.580607][T30461] __sock_create+0x12d/0x9d0 [ 2537.580643][T30461] __sys_socket+0xd6/0x1b0 [ 2537.580673][T30461] __x64_sys_socket+0x7a/0x90 [ 2537.580701][T30461] do_syscall_64+0x166/0x520 [ 2537.580728][T30461] ? trace_irq_disable+0x3b/0x140 [ 2537.580756][T30461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2537.580781][T30461] ? clear_bhb_loop+0x70/0xc0 [ 2537.580809][T30461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2537.580832][T30461] RIP: 0033:0x7f9b0a98e159 [ 2537.580854][T30461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2537.580873][T30461] RSP: 002b:00007f9b08be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2537.580898][T30461] RAX: ffffffffffffffda RBX: 00007f9b0ac15fa0 RCX: 00007f9b0a98e159 [ 2537.580915][T30461] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2537.580930][T30461] RBP: 00007f9b0aa25024 R08: 0000000000000000 R09: 0000000000000000 [ 2537.580945][T30461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2537.580977][T30461] R13: 00007f9b0ac16038 R14: 00007f9b0ac15fa0 R15: 00007fffdcac9fd8 [ 2537.581020][T30461] [ 2537.581103][T30461] socket: no more sockets [ 2541.571516][T30486] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI [ 2541.583550][T30486] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 2541.591984][T30486] CPU: 1 UID: 0 PID: 30486 Comm: syz.4.6752 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2541.603462][T30486] Tainted: [L]=SOFTLOCKUP [ 2541.607795][T30486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2541.617863][T30486] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 2541.623619][T30486] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 1e 99 c1 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 f6 98 c1 ff 4d 8b 2c 24 4c 89 ef e8 [ 2541.643237][T30486] RSP: 0018:ffffc900056bfc80 EFLAGS: 00010202 [ 2541.649327][T30486] RAX: 0000000000000016 RBX: ffff88802c1d3748 RCX: dffffc0000000000 [ 2541.657414][T30486] RDX: 0000000000000001 RSI: ffffffff8d8ca278 RDI: 00000000ffffffff [ 2541.665404][T30486] RBP: ffffc900056bfd88 R08: ffffffff8fb1e17f R09: 1ffffffff1f63c2f [ 2541.673399][T30486] R10: dffffc0000000000 R11: fffffbfff1f63c30 R12: 00000000000000b0 [ 2541.681395][T30486] R13: 0000000000000000 R14: ffffffff8c2420a8 R15: 1ffff92000ad7fa0 [ 2541.689388][T30486] FS: 00007fefb73e46c0(0000) GS:ffff888125cd4000(0000) knlGS:0000000000000000 [ 2541.698348][T30486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2541.704948][T30486] CR2: 00007f6a61c8edc0 CR3: 00000000343a2000 CR4: 00000000003526f0 [ 2541.712938][T30486] Call Trace: [ 2541.716240][T30486] [ 2541.719203][T30486] ? __pfx_configfs_symlink+0x10/0x10 [ 2541.724622][T30486] ? bpf_lsm_inode_symlink+0x9/0x20 [ 2541.729863][T30486] vfs_symlink+0x18b/0x330 [ 2541.734316][T30486] ? security_path_symlink+0xfd/0x360 [ 2541.739715][T30486] filename_symlinkat+0x1cd/0x420 [ 2541.744773][T30486] ? __pfx_filename_symlinkat+0x10/0x10 [ 2541.750350][T30486] ? do_getname+0x151/0x250 [ 2541.754904][T30486] __se_sys_symlinkat+0x4e/0x2b0 [ 2541.759884][T30486] do_syscall_64+0x166/0x520 [ 2541.764508][T30486] ? trace_irq_disable+0x3b/0x140 [ 2541.769556][T30486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2541.775661][T30486] ? clear_bhb_loop+0x70/0xc0 [ 2541.780364][T30486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2541.786284][T30486] RIP: 0033:0x7fefb91ce159 [ 2541.790718][T30486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2541.810344][T30486] RSP: 002b:00007fefb73e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 2541.818791][T30486] RAX: ffffffffffffffda RBX: 00007fefb9456180 RCX: 00007fefb91ce159 [ 2541.826799][T30486] RDX: 0000200000000540 RSI: ffffffffffffff9c RDI: 0000200000000500 [ 2541.834799][T30486] RBP: 00007fefb9265024 R08: 0000000000000000 R09: 0000000000000000 [ 2541.842807][T30486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2541.850802][T30486] R13: 00007fefb9456218 R14: 00007fefb9456180 R15: 00007ffe85485888 [ 2541.858814][T30486] [ 2541.861867][T30486] Modules linked in: [ 2541.865857][T30486] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)