last executing test programs: 24.644112549s ago: executing program 3 (id=53): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup.cpu/memory.force_empty\x00', 0x21283, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000001dc0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000001e00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e40)) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000001f00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 22.377579593s ago: executing program 4 (id=61): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 21.961498705s ago: executing program 4 (id=62): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) write$FUSE_BMAP(r0, &(0x7f0000003400)={0x18, 0xfffffffffffffff5, 0x0, {0x692d}}, 0x18) pipe2(&(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) pipe(0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f00000002c0), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_ublk_setup_io_uring(0x1d43, &(0x7f0000000400)={0x0, 0xf657, 0x20, 0x1, 0x341}, &(0x7f0000000480), &(0x7f00000005c0), &(0x7f0000000200)) r7 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r7, 0x0, 0x0, 0x80000) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000008732b1e0040000102030109027e000301804004080b0101010a200009040000000101200009240102000b1e00020924080606010001000c2403fd0607a80506f9ff0a090e0100000102200009040101010102200009050109400005040031c12dcdb6e827390d5bcb338fae082501810909020009040200000102200009040201010102200009"], 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21.152027564s ago: executing program 3 (id=66): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x0, 0x100000000}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 17.891586024s ago: executing program 3 (id=69): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) pipe2(&(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) pipe(0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f00000002c0), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_ublk_setup_io_uring(0x1d43, &(0x7f0000000400)={0x0, 0xf657, 0x20, 0x1, 0x341}, &(0x7f0000000480), &(0x7f00000005c0), &(0x7f0000000200)) r7 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r7, 0x0, 0x0, 0x80000) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000008732b1e0040000102030109027e000301804004080b0101010a200009040000000101200009240102000b1e00020924080606010001000c2403fd0607a80506f9ff0a090e0100000102200009040101010102200009050109400005040031c12dcdb6e827390d5bcb338fae082501810909020009040200000102200009040201010102200009"], 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17.405333956s ago: executing program 4 (id=71): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000d0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000600)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000840)={0x0, 0x18, 0x0}, 0x0) r5 = fsopen(&(0x7f00000002c0)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='test_dummy_encryption', &(0x7f0000000340)='v8\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffffffffffa) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000004c0)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 17.170207312s ago: executing program 0 (id=72): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 16.544876062s ago: executing program 0 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000240)='for', 0x3) 15.244894282s ago: executing program 0 (id=77): socket$vsock_stream(0x28, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0x94ff, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000440)=0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000480), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x4000000000001d9, 0x10003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = syz_io_uring_setup(0x67d, &(0x7f0000000100)={0x0, 0x630e, 0x40, 0x1000002, 0x3ac}, &(0x7f0000000180), &(0x7f0000000340)=0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000003c0)={&(0x7f0000003000)={[{0x0}, {0x0}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffc}]}, 0x4, 0x5}, 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000563000/0x1000)=nil, 0x1000, 0xc) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000004000)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRES16=r5], 0xcd0}}, 0x20000014) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @private0, 0x4000ca}, 0x1c) recvmmsg(r6, 0x0, 0x0, 0x40000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 12.971248527s ago: executing program 1 (id=79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/13, 0x591000, 0x800, 0x0, 0x1}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @ioapic={0x1ffd, 0xfea, 0x7f, 0x5, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x8}, {0xff, 0x7, 0x7e, '\x00', 0x79}, {0x40, 0x7, 0x10, '\x00', 0x4}, {0x4, 0x6, 0x5, '\x00', 0xe6}, {0x8, 0x1, 0x8, '\x00', 0x7}, {0x7f, 0x81, 0x1, '\x00', 0x6}, {0x5f, 0x2, 0x2, '\x00', 0xc7}, {0x2, 0xf8, 0x7, '\x00', 0x19}, {0x0, 0x5, 0xe, '\x00', 0x7}, {0x0, 0x3, 0x6, '\x00', 0x1}, {0x0, 0x4, 0x8, '\x00', 0xf}, {0x2, 0x4, 0xe, '\x00', 0x6}, {0xff, 0x7, 0x0, '\x00', 0x4}, {0x4, 0xda, 0x18, '\x00', 0x87}, {0xf5, 0x6, 0x8, '\x00', 0x3}, {0x1, 0xb2, 0x80, '\x00', 0x7}, {0xd8, 0x9, 0x26, '\x00', 0x5}, {0xf, 0x4c, 0x7, '\x00', 0x81}, {0x6, 0x2, 0x2, '\x00', 0x7}, {0x6, 0x1, 0xff, '\x00', 0x4}, {0x5, 0x1, 0x1, '\x00', 0x10}, {0x7f, 0x8, 0x5, '\x00', 0x7}, {0x32, 0x9, 0x8, '\x00', 0x7}, {0x1, 0x5, 0x0, '\x00', 0x10}]}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="010028bd7000fedbdf25030000005800018044000400200001000a00000000000000fe80080000000000000000000000001d00000000200002000a00000000000001fe8000000000000000000000000000bb000000000d64703a73797a3000000000"], 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vcan0\x00'}) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000680)={0xffe, 0x5000}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000700)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) bind$inet(r3, &(0x7f0000000740)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg(r3, &(0x7f00000007c0), 0x800001d, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="c362", @ANYRES32], 0x22) syz_open_dev$vim2m(&(0x7f0000000880), 0x800, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0) syz_open_dev$vim2m(&(0x7f00000008c0), 0x800, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000900), 0x800, 0x2) r7 = syz_open_dev$video(&(0x7f0000000940), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000980)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) 12.53815152s ago: executing program 3 (id=80): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000600)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000840)={0x0, 0x18, 0x0}, 0x0) r5 = fsopen(&(0x7f00000002c0)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='test_dummy_encryption', &(0x7f0000000340)='v8\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffffffffffa) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000004c0)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 12.260020132s ago: executing program 2 (id=81): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x6000, 0x0, 0x20048001}, 0x800) 12.056514029s ago: executing program 1 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000002e40)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100"], 0x0) sendmsg$nl_route(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000401e04203040000102030109026e00030108c014080b00050125300709040103000a24"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002f40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002f80)=0x8) r2 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setaffinity(0x0, 0x8, &(0x7f0000002fc0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000003000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00a311c4971f5e4bb44c0c77799b2adbb441971f1895c56b7cc11c224cf8ea5d1943fcb9f7d5d0afb51c3257dd408a240f51d2ed7e70ad10deb2bb05e6bc1807f9f4240f09644c962bcc0d21d5237b96b3a0223ca74a2183e0767a6cf04e1f885726bed42839d578637e288bfc10681b0e8b73c46d3447c4a279ecd7555d3f41e092ab4ab6f5e40c6411bed1fbec64037fa33ca9ecbcccc87e9272e840ea35237eae47a1b737", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x8090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r2, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000003200), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000003240)=0x2) recvmmsg(r5, &(0x7f0000003280), 0x10106, 0x2, 0x0) dup2(r6, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffffd23a7f9b1795bb72d74bac83739b6f6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.764093511s ago: executing program 4 (id=83): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = eventfd2(0x8, 0x0) read(r4, 0x0, 0x0) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r5, 0x40104d06, &(0x7f0000000640)="0000020000000000000002") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000040000"], 0x48) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x100000001, 0x4) 11.649013889s ago: executing program 2 (id=84): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 9.158999178s ago: executing program 4 (id=85): r0 = socket(0x29, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}}, 0xac}}, 0x44804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x4000040) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x102) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000001740)=0xc) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0xfffffffffffffe2c, 0x0, 0x0, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1, 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000001900)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a40), 0x366, 0x10, &(0x7f0000001a80), 0xfffffffffffffd1a}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001ac0)={r2, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xcfa42, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendfile(r3, r3, 0x0, 0x200000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/4075, 0xfeb}], 0x1) recvmmsg(r0, 0x0, 0x0, 0x2123, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1, 0x9, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x3, 0x6, 0x4, 0xa, 0x80, 0xfffffffffffffffc}, @map_fd={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000001440)='syzkaller\x00', 0x5, 0x2f, &(0x7f0000001480)=""/47, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000014c0), 0x10, 0x146f}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000002bc0)={{0x12, 0x1, 0x300, 0x8f, 0x5a, 0x8, 0x40, 0x846, 0x1001, 0xe047, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x85, 0x88, 0x10, 0x7, "", [{{0x9, 0x4, 0x6d, 0x3, 0x1, 0x9a, 0x26, 0x13, 0x9, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x9a, 0x4, 0x2}}]}}]}}]}}, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0}) 9.115109311s ago: executing program 2 (id=86): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x9, 0x80) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)={0x0, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 8.419210424s ago: executing program 0 (id=87): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = eventfd2(0x8, 0x0) read(r3, 0x0, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d06, &(0x7f0000000640)="0000020000000000000002") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000040000"], 0x48) 8.394785783s ago: executing program 1 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000240)='for', 0x3) 5.797535843s ago: executing program 0 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000002e40)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100"], 0x0) sendmsg$nl_route(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000401e04203040000102030109026e00030108c014080b00050125300709040103000a24"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002f40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002f80)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002fc0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000003000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00a311c4971f5e4bb44c0c77799b2adbb441971f1895c56b7cc11c224cf8ea5d1943fcb9f7d5d0afb51c3257dd408a240f51d2ed7e70ad10deb2bb05e6bc1807f9f4240f09644c962bcc0d21d5237b96b3a0223ca74a2183e0767a6cf04e1f885726bed42839d578637e288bfc10681b0e8b73c46d3447c4a279ecd7555d3f41e092ab4ab6f5e40c6411bed1fbec64037fa33ca9ecbcccc87e9272e840ea35237eae47a1b737", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x8090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r2, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000003200), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000003240)=0x2) recvmmsg(r5, &(0x7f0000003280), 0x10106, 0x2, 0x0) dup2(r6, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffffd23a7f9b1795bb72d74bac83739b6f6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.524421689s ago: executing program 2 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000002e40)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a250100000000000000090402000001022000090402010101022000162401010000000001010000000000000002100000000624020102100905820900020100"], 0x0) sendmsg$nl_route(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000401e04203040000102030109026e00030108c014080b00050125300709040103000a24"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002f40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002f80)=0x8) r2 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setaffinity(0x0, 0x8, &(0x7f0000002fc0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000003000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00a311c4971f5e4bb44c0c77799b2adbb441971f1895c56b7cc11c224cf8ea5d1943fcb9f7d5d0afb51c3257dd408a240f51d2ed7e70ad10deb2bb05e6bc1807f9f4240f09644c962bcc0d21d5237b96b3a0223ca74a2183e0767a6cf04e1f885726bed42839d578637e288bfc10681b0e8b73c46d3447c4a279ecd7555d3f41e092ab4ab6f5e40c6411bed1fbec64037fa33ca9ecbcccc87e9272e840ea35237eae47a1b737", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x8090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r2, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000003200), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000003240)=0x2) recvmmsg(r5, &(0x7f0000003280), 0x10106, 0x2, 0x0) dup2(r6, 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffffd23a7f9b1795bb72d74bac83739b6f6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.379652769s ago: executing program 3 (id=91): r0 = socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x80) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) preadv(r0, &(0x7f00000018c0), 0x0, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) getrusage(0x1, &(0x7f0000000780)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), 0x0, 0x1003}, 0x38) syz_open_dev$tty20(0xc, 0x4, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000100)={@remote}, 0x14) 5.243072114s ago: executing program 1 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x3c}}, 0x0) 4.919547557s ago: executing program 1 (id=93): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x40008c0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.749936719s ago: executing program 1 (id=94): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001a80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)="eb", 0x1}], 0x1, &(0x7f0000001b80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001c40)=""/106, 0x6a}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001700)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001740)={'syzkaller1\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001780)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0) write$tun(r3, &(0x7f0000001980)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x24}}, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x3b, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x4, 0x0, {0x5, 0x4, 0x1, 0x1, 0x0, 0x67, 0x80, 0x4, 0x11, 0x1000, @empty, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}}, 0x46) socketpair(0x1d, 0x2, 0x9, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000001280)='ip6gre0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r8, @ANYRES64=0x0, @ANYRES32=r8, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af1678a9589c37097d99bc26a78f96b910612e9162d17c475a922e9c37b3c114c8d12739bf68a5489ff6ddcd8ccc9e5bc1bbd9"], 0x48}}, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{r0}, 0x0, 0x12, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x3, 0x1, {0x2, 0x9, 0xb38, 0x1000, 0x2}, [0x6, 0x1]}}, @devid}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x1, 0x8}, &(0x7f0000001680)=0x90) mmap(&(0x7f0000447000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) 1.69766962s ago: executing program 0 (id=95): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) write$FUSE_BMAP(r0, &(0x7f0000003400)={0x18, 0xfffffffffffffff5, 0x0, {0x692d}}, 0x18) pipe2(0x0, 0x800) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) pipe(0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f00000002c0), 0x2000011a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_ublk_setup_io_uring(0x1d43, &(0x7f0000000400)={0x0, 0xf657, 0x20, 0x1, 0x341}, &(0x7f0000000480), &(0x7f00000005c0), &(0x7f0000000200)) r6 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r6, 0x0, 0x0, 0x80000) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000008732b1e0040000102030109027e000301804004080b0101010a200009040000000101200009240102000b1e00020924080606010001000c2403fd0607a80506f9ff0a090e0100000102200009040101010102200009050109400005040031c12dcdb6e827390d5bcb338fae082501810909020009040200000102200009040201010102200009"], 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 947.572398ms ago: executing program 2 (id=96): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 767.0562ms ago: executing program 3 (id=97): r0 = socket(0x29, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}}, 0xac}}, 0x44804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={&(0x7f0000001600)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x102) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000001740)=0xc) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0xfffffffffffffe2c, 0x0, 0x0, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1, 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000001900)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a40), 0x366, 0x10, &(0x7f0000001a80), 0xfffffffffffffd1a}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001ac0)={r2, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xcfa42, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendfile(r3, r3, 0x0, 0x200000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/4075, 0xfeb}], 0x1) recvmmsg(r0, 0x0, 0x0, 0x2123, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1, 0x9, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x3, 0x6, 0x4, 0xa, 0x80, 0xfffffffffffffffc}, @map_fd={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000001440)='syzkaller\x00', 0x5, 0x2f, &(0x7f0000001480)=""/47, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000014c0), 0x10, 0x146f}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000002bc0)={{0x12, 0x1, 0x300, 0x8f, 0x5a, 0x8, 0x40, 0x846, 0x1001, 0xe047, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x85, 0x88, 0x10, 0x7, "", [{{0x9, 0x4, 0x6d, 0x3, 0x1, 0x9a, 0x26, 0x13, 0x9, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x9a, 0x4, 0x2}}]}}]}}]}}, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0}) 328.21658ms ago: executing program 2 (id=98): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0x94ff, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000440)=0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000480)='n', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x4000000000001d9, 0x10003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = syz_io_uring_setup(0x67d, &(0x7f0000000100)={0x0, 0x630e, 0x40, 0x1000002, 0x3ac}, &(0x7f0000000180), &(0x7f0000000340)=0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000003c0)={&(0x7f0000003000)={[{0x0}, {0x0}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffc}]}, 0x4, 0x5}, 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000563000/0x1000)=nil, 0x1000, 0xc) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000004000)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES16=r6], 0xcd0}}, 0x20000014) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @private0, 0x4000ca}, 0x1c) recvmmsg(r7, 0x0, 0x0, 0x40000002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 0s ago: executing program 4 (id=99): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x40000d0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000600)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000840)={0x0, 0x18, 0x0}, 0x0) r5 = fsopen(&(0x7f00000002c0)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='test_dummy_encryption', &(0x7f0000000340)='v8\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffffffffffa) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000004c0)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 72.413838][ T5587] cgroup: Unknown subsys name 'net' [ 72.625840][ T5587] cgroup: Unknown subsys name 'cpuset' [ 72.680360][ T5587] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.313024][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.870693][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.873479][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.894098][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.895411][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.899420][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.902021][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.902923][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.918800][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.924262][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.930703][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.964218][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.964674][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.965742][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.966782][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.967152][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.978550][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.986181][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.986622][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.990000][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.990518][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.096758][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.108168][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.123473][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.124521][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.125225][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.198440][ T5601] rdma_rxe: Failed to create IPv4 UDP tunnel [ 78.221714][ T5603] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.230342][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.234582][ T5600] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.243745][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.255560][ T5599] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.286207][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.908382][ T5598] infiniband rxe0: set active [ 78.908403][ T5598] infiniband rxe0: added rxe_eth0 [ 78.986614][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.000865][ T61] Bluetooth: hci2: command tx timeout [ 79.027482][ T5598] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 79.027515][ T5598] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 79.027547][ T5598] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 79.079812][ T61] Bluetooth: hci3: command tx timeout [ 79.139488][ T5598] RDS/IB: rxe0: added [ 79.143849][ T5598] smc: adding ib device rxe0 with port count 1 [ 79.144041][ T5598] smc: ib device rxe0 port 1 has no pnetid [ 79.161361][ T61] Bluetooth: hci0: command tx timeout [ 79.170132][ T61] Bluetooth: hci1: command tx timeout [ 79.206852][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.246686][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.251492][ T61] Bluetooth: hci4: command tx timeout [ 79.293836][ T5335] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.646397][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.134827][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.465775][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.483278][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.485855][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.485998][ T5603] bridge_slave_0: entered allmulticast mode [ 80.514457][ T5603] bridge_slave_0: entered promiscuous mode [ 80.593828][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.593897][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.594327][ T5603] bridge_slave_1: entered allmulticast mode [ 80.596272][ T5603] bridge_slave_1: entered promiscuous mode [ 80.598758][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.598868][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.599020][ T5601] bridge_slave_0: entered allmulticast mode [ 80.602331][ T5601] bridge_slave_0: entered promiscuous mode [ 80.608174][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.608287][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.608442][ T5600] bridge_slave_0: entered allmulticast mode [ 80.612503][ T5600] bridge_slave_0: entered promiscuous mode [ 80.699893][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.699996][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.700117][ T5601] bridge_slave_1: entered allmulticast mode [ 80.701497][ T5601] bridge_slave_1: entered promiscuous mode [ 80.718507][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.718622][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.718771][ T5600] bridge_slave_1: entered allmulticast mode [ 80.732769][ T5600] bridge_slave_1: entered promiscuous mode [ 80.735656][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.735783][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.736321][ T5599] bridge_slave_0: entered allmulticast mode [ 80.742578][ T5599] bridge_slave_0: entered promiscuous mode [ 80.850307][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.850424][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.850578][ T5599] bridge_slave_1: entered allmulticast mode [ 80.856651][ T5599] bridge_slave_1: entered promiscuous mode [ 80.869340][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.932312][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.935550][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.938378][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.975674][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.996521][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.999305][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.045015][ T5598] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.050113][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.071074][ T5603] team0: Port device team_slave_0 added [ 81.079938][ T61] Bluetooth: hci2: command tx timeout [ 81.157437][ T5603] team0: Port device team_slave_1 added [ 81.161211][ T61] Bluetooth: hci3: command tx timeout [ 81.162843][ T5601] team0: Port device team_slave_0 added [ 81.201768][ T5600] team0: Port device team_slave_0 added [ 81.225939][ T5601] team0: Port device team_slave_1 added [ 81.228888][ T5599] team0: Port device team_slave_0 added [ 81.241504][ T5612] Bluetooth: hci0: command tx timeout [ 81.241606][ T61] Bluetooth: hci1: command tx timeout [ 81.257814][ T5600] team0: Port device team_slave_1 added [ 81.321603][ T5599] team0: Port device team_slave_1 added [ 81.330002][ T61] Bluetooth: hci4: command tx timeout [ 81.357890][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.357902][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.357923][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.427676][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.427692][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.427715][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.431379][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.431393][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.431415][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.452834][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.452851][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.452874][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.477666][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.477684][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.477721][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.479626][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.479639][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.479662][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.486272][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.486287][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.486310][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.537543][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.537560][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.537583][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.725600][ T5603] hsr_slave_0: entered promiscuous mode [ 81.727175][ T5603] hsr_slave_1: entered promiscuous mode [ 81.769908][ T5601] hsr_slave_0: entered promiscuous mode [ 81.770904][ T5601] hsr_slave_1: entered promiscuous mode [ 81.771684][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 81.771778][ T5601] Cannot create hsr debugfs directory [ 82.136379][ T5600] hsr_slave_0: entered promiscuous mode [ 82.137142][ T5600] hsr_slave_1: entered promiscuous mode [ 82.137639][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 82.137660][ T5600] Cannot create hsr debugfs directory [ 82.167128][ T5599] hsr_slave_0: entered promiscuous mode [ 82.167970][ T5599] hsr_slave_1: entered promiscuous mode [ 82.168529][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 82.168551][ T5599] Cannot create hsr debugfs directory [ 82.901164][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.936716][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.961812][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.986430][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.013033][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.045041][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.080398][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.115834][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.159831][ T61] Bluetooth: hci2: command tx timeout [ 83.179381][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.179496][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.179631][ T5598] bridge_slave_0: entered allmulticast mode [ 83.201220][ T5598] bridge_slave_0: entered promiscuous mode [ 83.227852][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.227944][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.228245][ T5598] bridge_slave_1: entered allmulticast mode [ 83.229520][ T5598] bridge_slave_1: entered promiscuous mode [ 83.239847][ T61] Bluetooth: hci3: command tx timeout [ 83.315444][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.322716][ T61] Bluetooth: hci1: command tx timeout [ 83.322748][ T61] Bluetooth: hci0: command tx timeout [ 83.344058][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.344885][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.396586][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.409945][ T5612] Bluetooth: hci4: command tx timeout [ 83.439327][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.472867][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.501392][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.536628][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.561683][ T5598] team0: Port device team_slave_0 added [ 83.561778][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.593340][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.608551][ T5598] team0: Port device team_slave_1 added [ 83.672252][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.672269][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.672283][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.677726][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.677740][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.677763][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.761468][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.795066][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.821747][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.855294][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.880756][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.914051][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.923444][ T5598] hsr_slave_0: entered promiscuous mode [ 83.924680][ T5598] hsr_slave_1: entered promiscuous mode [ 83.925817][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 83.925842][ T5598] Cannot create hsr debugfs directory [ 84.120583][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.164888][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.320493][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.362811][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.394542][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.424675][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.438874][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.463125][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.472509][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.514287][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.711598][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.831813][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.872187][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.904642][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.918608][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.953222][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.980105][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.980961][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.985915][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.032685][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.046467][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.046792][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.068875][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.096275][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.096540][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.187677][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.216973][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.240022][ T5612] Bluetooth: hci2: command tx timeout [ 85.255573][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.255698][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.300567][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.300763][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.320015][ T5612] Bluetooth: hci3: command tx timeout [ 85.345443][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.365419][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.395360][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.395485][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.404384][ T5612] Bluetooth: hci0: command tx timeout [ 85.404404][ T61] Bluetooth: hci1: command tx timeout [ 85.477206][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.477331][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.489963][ T61] Bluetooth: hci4: command tx timeout [ 85.569026][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.669416][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.669540][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.743263][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.743434][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.847291][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.089573][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.152265][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.153628][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.248896][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.251348][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.759305][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.006407][ T10] cfg80211: failed to load regulatory.db [ 87.137745][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.178842][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.209379][ T5603] veth0_vlan: entered promiscuous mode [ 87.284214][ T5603] veth1_vlan: entered promiscuous mode [ 87.521958][ T5600] veth0_vlan: entered promiscuous mode [ 87.531142][ T5601] veth0_vlan: entered promiscuous mode [ 87.534669][ T5603] veth0_macvtap: entered promiscuous mode [ 87.542085][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.577168][ T5603] veth1_macvtap: entered promiscuous mode [ 87.613021][ T5601] veth1_vlan: entered promiscuous mode [ 87.618636][ T5600] veth1_vlan: entered promiscuous mode [ 87.677650][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.733628][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.812400][ T5601] veth0_macvtap: entered promiscuous mode [ 87.819343][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.852954][ T5600] veth0_macvtap: entered promiscuous mode [ 87.952696][ T5601] veth1_macvtap: entered promiscuous mode [ 87.956458][ T5599] veth0_vlan: entered promiscuous mode [ 87.958442][ T5600] veth1_macvtap: entered promiscuous mode [ 88.198255][ T5599] veth1_vlan: entered promiscuous mode [ 88.271773][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.275827][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.343944][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.357664][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.357689][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.376944][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.456359][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.456379][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.540484][ T5599] veth0_macvtap: entered promiscuous mode [ 88.647751][ T5599] veth1_macvtap: entered promiscuous mode [ 89.072808][ T5598] veth0_vlan: entered promiscuous mode [ 89.137917][ T5603] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.163662][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.184526][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.184545][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.289207][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.293548][ T5598] veth1_vlan: entered promiscuous mode [ 89.306791][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.306812][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.768446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.768467][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.852774][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.853347][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.905326][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.905345][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.545336][ T5745] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.889610][ T5598] veth0_macvtap: entered promiscuous mode [ 92.003533][ T5598] veth1_macvtap: entered promiscuous mode [ 92.028421][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.028442][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.325872][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.325892][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.439635][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.527007][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.699707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.659737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.839760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.849761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.859755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.328568][ T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.328786][ T172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.328971][ T172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.329143][ T172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.329376][ T172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.329598][ T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.796690][ T172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.908120][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.908142][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.951126][ T164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.951407][ T164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990230][ T1004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990441][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990488][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990511][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990529][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990546][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990564][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990581][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.000594][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.709209][ T5836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.709225][ T5836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.041105][ T4929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.056657][ T5335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.130261][ T5612] Bluetooth: hci4: command 0x0405 tx timeout [ 108.346357][ T5335] usb 3-1: Using ep0 maxpacket: 8 [ 108.368986][ T5335] usb 3-1: New USB device found: idVendor=2b73, idProduct=001e, bcdDevice=0.40 [ 108.374672][ T4929] usb 2-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 108.454350][ T5335] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 108.454368][ T5335] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.454406][ T5335] usb 3-1: config 1 interface 1 has no altsetting 0 [ 108.490302][ T4929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.510290][ T4929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.510306][ T4929] usb 2-1: Product: syz [ 108.510313][ T4929] usb 2-1: Manufacturer: syz [ 108.510320][ T4929] usb 2-1: SerialNumber: syz [ 108.550706][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.550723][ T5335] usb 3-1: Product: syz [ 108.550730][ T5335] usb 3-1: Manufacturer: syz [ 108.550737][ T5335] usb 3-1: SerialNumber: syz [ 109.325603][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 110.582204][ T4929] usb 2-1: 1:1 : unsupported format bits 0x2020000 [ 110.656526][ T4929] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 110.656554][ T4929] usb 2-1: 2:1 : unsupported format bits 0x2020000 [ 111.496226][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.519057][ T5335] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.519081][ T5335] usb 3-1: selecting invalid altsetting 0 [ 111.519203][ T5335] usb 3-1: unit 5 not found! [ 111.990197][ T4929] usb 2-1: USB disconnect, device number 2 [ 112.623192][ T5335] usb 3-1: USB disconnect, device number 2 [ 112.750624][ T5605] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.037061][ T5605] usb 5-1: Using ep0 maxpacket: 8 [ 113.054934][ T5605] usb 5-1: New USB device found: idVendor=2b73, idProduct=001e, bcdDevice=0.40 [ 113.115351][ T5605] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 113.115369][ T5605] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.115424][ T5605] usb 5-1: config 1 interface 1 has no altsetting 0 [ 113.164473][ T5605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.164490][ T5605] usb 5-1: Product: syz [ 113.164497][ T5605] usb 5-1: Manufacturer: syz [ 113.164504][ T5605] usb 5-1: SerialNumber: syz [ 113.284372][ T5926] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 114.354682][ T5605] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 114.354699][ T5605] usb 5-1: selecting invalid altsetting 0 [ 114.354755][ T5605] usb 5-1: unit 5 not found! [ 114.882851][ T5605] usb 5-1: USB disconnect, device number 2 [ 115.264473][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 117.506590][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.949838][ T994] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.150687][ T994] usb 1-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 119.152188][ T994] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.157840][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.157854][ T994] usb 1-1: Product: syz [ 119.157861][ T994] usb 1-1: Manufacturer: syz [ 119.157868][ T994] usb 1-1: SerialNumber: syz [ 119.245567][ T994] usb 1-1: 1:1 : unsupported format bits 0x2020000 [ 119.340032][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.435620][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 119.473681][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.496891][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.659793][ T5891] usb 3-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 119.886711][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 120.943564][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.107806][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.107823][ T5891] usb 3-1: Product: syz [ 121.107830][ T5891] usb 3-1: Manufacturer: syz [ 121.107837][ T5891] usb 3-1: SerialNumber: syz [ 121.403950][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 121.496512][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.512495][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.972703][ T5958] syz.0.26 (5958) used greatest stack depth: 17128 bytes left [ 122.097253][ T994] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 122.097271][ T994] usb 1-1: 2:1 : unsupported format bits 0x2020000 [ 122.428880][ T5891] usb 3-1: 1:1 : unsupported format bits 0x2020000 [ 122.740165][ T5890] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 122.774994][ T994] usb 1-1: USB disconnect, device number 2 [ 123.007535][ T5891] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 123.007560][ T5891] usb 3-1: 2:1 : unsupported format bits 0x2020000 [ 123.057577][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.058700][ T5890] usb 5-1: not running at top speed; connect to a high speed hub [ 123.058725][ T5890] usb 5-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 123.109823][ T5890] usb 5-1: config 133 has an invalid interface number: 109 but max is 0 [ 123.109850][ T5890] usb 5-1: config 133 has no interface number 0 [ 123.109892][ T5890] usb 5-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 123.109913][ T5890] usb 5-1: config 133 interface 109 has no altsetting 0 [ 123.133441][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.133458][ T5890] usb 5-1: Product: syz [ 123.133466][ T5890] usb 5-1: Manufacturer: syz [ 123.133473][ T5890] usb 5-1: SerialNumber: syz [ 123.772198][ T5970] tipc: Started in network mode [ 123.772223][ T5970] tipc: Node identity 4, cluster identity 4711 [ 123.772235][ T5970] tipc: Node number set to 4 [ 124.349904][ T5605] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 124.731522][ T5605] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.763381][ T5605] usb 4-1: not running at top speed; connect to a high speed hub [ 124.763501][ T5605] usb 4-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 125.263973][ T5890] kaweth 5-1:133.109: couldn't find required endpoints [ 125.297443][ T5891] usb 3-1: USB disconnect, device number 3 [ 125.298930][ T5605] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.298951][ T5605] usb 4-1: can't read configurations, error -71 [ 125.329733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 125.532918][ T5981] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 125.675242][ T5890] usb 5-1: USB disconnect, device number 3 [ 125.930433][ T5987] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 126.381584][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.527425][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 126.959880][ T5683] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.117785][ T5683] usb 5-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 127.119296][ T5683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.212304][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.212322][ T5683] usb 5-1: Product: syz [ 127.212336][ T5683] usb 5-1: Manufacturer: syz [ 127.212348][ T5683] usb 5-1: SerialNumber: syz [ 127.361865][ T6000] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 127.398692][ T5683] usb 5-1: 1:1 : unsupported format bits 0x2020000 [ 127.509954][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 127.601014][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.634967][ T5890] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.706918][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.039921][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 128.042188][ T5890] usb 4-1: New USB device found: idVendor=2b73, idProduct=001e, bcdDevice=0.40 [ 128.047620][ T5890] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 128.047637][ T5890] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.047679][ T5890] usb 4-1: config 1 interface 1 has no altsetting 0 [ 128.175465][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.175639][ T5890] usb 4-1: Product: syz [ 128.175653][ T5890] usb 4-1: Manufacturer: syz [ 128.175666][ T5890] usb 4-1: SerialNumber: syz [ 128.370818][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 131.705872][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 132.424601][ T6031] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 132.452817][ T5683] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 132.452835][ T5683] usb 5-1: 2:1 : unsupported format bits 0x2020000 [ 132.899712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.949711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.419115][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.419211][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.545299][ T5890] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 133.545325][ T5890] usb 4-1: selecting invalid altsetting 0 [ 133.545393][ T5890] usb 4-1: unit 5 not found! [ 133.895392][ T5890] usb 4-1: USB disconnect, device number 4 [ 135.033984][ T6022] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 135.197217][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 136.226946][ T5683] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 136.434274][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.436779][ T5683] usb 1-1: not running at top speed; connect to a high speed hub [ 136.436804][ T5683] usb 1-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 136.448390][ T5683] usb 1-1: config 133 has an invalid interface number: 109 but max is 0 [ 136.448418][ T5683] usb 1-1: config 133 has no interface number 0 [ 136.448462][ T5683] usb 1-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 136.448485][ T5683] usb 1-1: config 133 interface 109 has no altsetting 0 [ 136.475939][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.475966][ T5683] usb 1-1: Product: syz [ 136.475979][ T5683] usb 1-1: Manufacturer: syz [ 136.475992][ T5683] usb 1-1: SerialNumber: syz [ 138.257048][ T5683] kaweth 1-1:133.109: couldn't find required endpoints [ 138.394075][ T5683] usb 1-1: USB disconnect, device number 3 [ 139.356726][ T6064] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 139.416019][ T5683] usb 5-1: USB disconnect, device number 4 [ 140.419086][ T6087] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 140.630872][ T5335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.795283][ T5335] usb 4-1: Using ep0 maxpacket: 16 [ 140.807877][ T5335] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 140.820277][ T5335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.820293][ T5335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.833348][ T5335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.833374][ T5335] usb 4-1: Product: syz [ 140.833387][ T5335] usb 4-1: Manufacturer: syz [ 140.833400][ T5335] usb 4-1: SerialNumber: syz [ 142.024732][ T5335] usb 4-1: 0:2 : does not exist [ 142.024788][ T5335] usb 4-1: unit 18 not found! [ 142.490880][ T5335] usb 4-1: USB disconnect, device number 5 [ 142.603646][ T6111] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 142.732477][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.279880][ T35] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.480577][ T35] usb 3-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 143.481900][ T35] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.483808][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.483822][ T35] usb 3-1: Product: syz [ 143.483829][ T35] usb 3-1: Manufacturer: syz [ 143.483836][ T35] usb 3-1: SerialNumber: syz [ 143.620552][ T35] usb 3-1: 1:1 : unsupported format bits 0x2020000 [ 143.897883][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 143.941776][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.942400][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.178732][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.484978][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 145.128259][ T6122] Zero length message leads to an empty skb [ 145.281472][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 145.284872][ T5891] usb 5-1: New USB device found: idVendor=2b73, idProduct=001e, bcdDevice=0.40 [ 145.343929][ T5891] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 145.343947][ T5891] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 145.343983][ T5891] usb 5-1: config 1 interface 1 has no altsetting 0 [ 145.400258][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.400275][ T5891] usb 5-1: Product: syz [ 145.400282][ T5891] usb 5-1: Manufacturer: syz [ 145.400289][ T5891] usb 5-1: SerialNumber: syz [ 146.287074][ T35] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 146.287092][ T35] usb 3-1: 2:1 : unsupported format bits 0x2020000 [ 146.448822][ T5891] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.448839][ T5891] usb 5-1: selecting invalid altsetting 0 [ 146.448884][ T5891] usb 5-1: unit 5 not found! [ 146.527458][ T35] usb 3-1: USB disconnect, device number 4 [ 146.650612][ T5891] usb 5-1: USB disconnect, device number 5 [ 146.919192][ T6137] syzkaller0: entered promiscuous mode [ 147.056630][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.270398][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 148.019876][ T6152] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 148.516727][ T6154] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 149.002357][ T5683] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.190763][ T5683] usb 4-1: Using ep0 maxpacket: 8 [ 149.191625][ T5683] usb 4-1: New USB device found: idVendor=2b73, idProduct=001e, bcdDevice=0.40 [ 149.193271][ T5683] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 149.193293][ T5683] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.193330][ T5683] usb 4-1: config 1 interface 1 has no altsetting 0 [ 149.203195][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.203221][ T5683] usb 4-1: Product: syz [ 149.203234][ T5683] usb 4-1: Manufacturer: syz [ 149.203247][ T5683] usb 4-1: SerialNumber: syz [ 152.000412][ T5683] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 152.000439][ T5683] usb 4-1: selecting invalid altsetting 0 [ 152.000506][ T5683] usb 4-1: unit 5 not found! [ 152.339279][ T5683] usb 4-1: USB disconnect, device number 6 [ 152.550187][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.972951][ T5683] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.020781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.109746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.491466][ T5683] usb 2-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 155.492869][ T5683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.498519][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.498535][ T5683] usb 2-1: Product: syz [ 155.498542][ T5683] usb 2-1: Manufacturer: syz [ 155.498549][ T5683] usb 2-1: SerialNumber: syz [ 155.566613][ T5683] usb 2-1: 1:1 : unsupported format bits 0x2020000 [ 156.117372][ T5683] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 156.117399][ T5683] usb 2-1: 2:1 : unsupported format bits 0x2020000 [ 156.309902][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.336032][ T5683] usb 2-1: USB disconnect, device number 3 [ 156.477339][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 156.495168][ T5891] usb 3-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 156.498601][ T5891] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 156.498619][ T5891] usb 3-1: config 0 has no interface number 0 [ 156.498646][ T5891] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 156.576808][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.579658][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.600588][ T5891] usb 3-1: Product: syz [ 156.600609][ T5891] usb 3-1: Manufacturer: syz [ 156.600622][ T5891] usb 3-1: SerialNumber: syz [ 156.652464][ T5891] usb 3-1: config 0 descriptor?? [ 156.675302][ T6202] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.977756][ T5891] asix 3-1:0.188: probe with driver asix failed with error -71 [ 159.100300][ T5891] usb 3-1: USB disconnect, device number 5 [ 159.510597][ T5978] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 159.510816][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 159.609833][ T5891] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.630186][ T35] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.652207][ T5978] usb 5-1: device descriptor read/64, error -32 [ 159.845141][ T35] usb 1-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 159.846206][ T35] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.861378][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.861404][ T35] usb 1-1: Product: syz [ 159.861417][ T35] usb 1-1: Manufacturer: syz [ 159.861429][ T35] usb 1-1: SerialNumber: syz [ 159.922134][ T5891] usb 3-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 159.930097][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.951355][ T5978] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 159.964400][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.964427][ T5891] usb 3-1: Product: syz [ 159.964441][ T5891] usb 3-1: Manufacturer: syz [ 159.964454][ T5891] usb 3-1: SerialNumber: syz [ 160.091501][ T35] usb 1-1: 1:1 : unsupported format bits 0x2020000 [ 160.144579][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 160.155556][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.173785][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.196426][ T5978] usb 5-1: not running at top speed; connect to a high speed hub [ 160.196455][ T5978] usb 5-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 160.211891][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.215369][ T5978] usb 5-1: config 133 has an invalid interface number: 109 but max is 0 [ 160.215496][ T5978] usb 5-1: config 133 has no interface number 0 [ 160.215541][ T5978] usb 5-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 160.215644][ T5978] usb 5-1: config 133 interface 109 has no altsetting 0 [ 160.454939][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 160.714484][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 161.385695][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.394139][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.831520][ T35] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 162.831538][ T35] usb 1-1: 2:1 : unsupported format bits 0x2020000 [ 163.442076][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.442094][ T5978] usb 5-1: Product: syz [ 163.650453][ T5891] usb 3-1: 1:1 : unsupported format bits 0x2020000 [ 163.688911][ T5891] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 163.688930][ T5891] usb 3-1: 2:1 : unsupported format bits 0x2020000 [ 163.775312][ T5978] usb 5-1: can't set config #133, error -71 [ 163.807326][ T35] usb 1-1: USB disconnect, device number 4 [ 163.916608][ T6235] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 163.931441][ T5978] usb 5-1: USB disconnect, device number 7 [ 164.150388][ T5612] block nbd296: Receive control failed (result -32) [ 164.569884][ T5891] usb 3-1: USB disconnect, device number 6 [ 165.329822][ T35] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.470866][ T6245] [ 165.473230][ T6245] ============================================ [ 165.479367][ T6245] WARNING: possible recursive locking detected [ 165.485645][ T6245] syzkaller #0 Not tainted [ 165.490043][ T6245] -------------------------------------------- [ 165.496186][ T6245] syz.3.97/6245 is trying to acquire lock: [ 165.501987][ T6245] ffff8880286d1688 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_buffered_write+0xd9/0x170 [ 165.512607][ T6245] [ 165.512607][ T6245] but task is already holding lock: [ 165.519989][ T6245] ffff8880286d1688 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0x6c8/0x810 [ 165.530424][ T6245] [ 165.530424][ T6245] other info that might help us debug this: [ 165.538588][ T6245] Possible unsafe locking scenario: [ 165.538588][ T6245] [ 165.546026][ T6245] CPU0 [ 165.549319][ T6245] ---- [ 165.552580][ T6245] lock(&sb->s_type->i_mutex_key#9); [ 165.557935][ T6245] lock(&sb->s_type->i_mutex_key#9); [ 165.563358][ T6245] [ 165.563358][ T6245] *** DEADLOCK *** [ 165.563358][ T6245] [ 165.571507][ T6245] May be due to missing lock nesting notation [ 165.571507][ T6245] [ 165.579819][ T6245] locks held by syz.3.97/6245: 1, last CPU#0: [ 165.585899][ T6245] #0: ffff8880286d1688 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0x6c8/0x810 [ 165.596683][ T6245] [ 165.596683][ T6245] stack backtrace: [ 165.602574][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.612182][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.622260][ T6245] Call Trace: [ 165.625559][ T6245] [ 165.628479][ T6245] dump_stack_lvl+0xe8/0x150 [ 165.633066][ T6245] print_deadlock_bug+0x27a/0x290 [ 165.638082][ T6245] __lock_acquire+0x25db/0x2de0 [ 165.642928][ T6245] lock_acquire+0x115/0x350 [ 165.647519][ T6245] ? blkdev_buffered_write+0xd9/0x170 [ 165.652895][ T6245] down_read+0x92/0x200 [ 165.657037][ T6245] ? blkdev_buffered_write+0xd9/0x170 [ 165.662403][ T6245] ? __pfx_down_read+0x10/0x10 [ 165.667171][ T6245] ? down_read+0x151/0x200 [ 165.671567][ T6245] ? __pfx_down_read+0x10/0x10 [ 165.676513][ T6245] ? kiocb_invalidate_pages+0xfc/0x140 [ 165.681968][ T6245] blkdev_buffered_write+0xd9/0x170 [ 165.687183][ T6245] blkdev_write_iter+0x6d8/0x810 [ 165.692119][ T6245] iter_file_splice_write+0xa36/0x1240 [ 165.697585][ T6245] ? __pfx_iter_file_splice_write+0x10/0x10 [ 165.703462][ T6245] ? __pfx_copy_splice_read+0x10/0x10 [ 165.708819][ T6245] ? register_lock_class+0x31/0x2e0 [ 165.714000][ T6245] ? __pfx_iter_file_splice_write+0x10/0x10 [ 165.720054][ T6245] direct_splice_actor+0x104/0x160 [ 165.725161][ T6245] splice_direct_to_actor+0x586/0xcc0 [ 165.730809][ T6245] ? __pfx_direct_splice_actor+0x10/0x10 [ 165.736526][ T6245] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 165.742412][ T6245] do_splice_direct+0x19b/0x2a0 [ 165.747261][ T6245] ? __pfx_do_splice_direct+0x10/0x10 [ 165.752633][ T6245] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 165.758510][ T6245] ? bpf_lsm_file_permission+0x9/0x20 [ 165.763858][ T6245] ? security_file_permission+0x75/0x260 [ 165.769506][ T6245] ? rw_verify_area+0x209/0x4d0 [ 165.774336][ T6245] ? fdget+0x1b2/0x250 [ 165.778388][ T6245] do_sendfile+0x540/0x7e0 [ 165.782784][ T6245] ? __pfx_do_sendfile+0x10/0x10 [ 165.788047][ T6245] ? __se_sys_futex+0x3a8/0x450 [ 165.792880][ T6245] __se_sys_sendfile64+0x144/0x1a0 [ 165.797972][ T6245] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 165.803580][ T6245] do_syscall_64+0x166/0x520 [ 165.808240][ T6245] ? trace_irq_disable+0x3b/0x140 [ 165.813243][ T6245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.819287][ T6245] ? clear_bhb_loop+0x70/0xc0 [ 165.823952][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.829846][ T6245] RIP: 0033:0x7f280dd2f559 [ 165.834296][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.854000][ T6245] RSP: 002b:00007f280bf7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 165.862689][ T6245] RAX: ffffffffffffffda RBX: 00007f280dfb5fa0 RCX: 00007f280dd2f559 [ 165.870728][ T6245] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 165.878766][ T6245] RBP: 00007f280ddc6b20 R08: 0000000000000000 R09: 0000000000000000 [ 165.887162][ T6245] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 165.895123][ T6245] R13: 00007f280dfb6038 R14: 00007f280dfb5fa0 R15: 00007ffc44629b68 [ 165.903794][ T6245] [ 166.039987][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 166.041370][ T35] usb 1-1: New USB device found: idVendor=2b73, idProduct=001e, bcdDevice=0.40 [ 166.043207][ T35] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 166.043230][ T35] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.043265][ T35] usb 1-1: config 1 interface 1 has no altsetting 0 [ 166.120921][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.120938][ T35] usb 1-1: Product: syz [ 166.120944][ T35] usb 1-1: Manufacturer: syz [ 166.120951][ T35] usb 1-1: SerialNumber: syz [ 166.219788][ T5605] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 166.308274][ T35] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 166.308290][ T35] usb 1-1: selecting invalid altsetting 0 [ 166.308319][ T35] usb 1-1: unit 5 not found! [ 166.334846][ T6254] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 166.373067][ T5605] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.375699][ T5605] usb 4-1: not running at top speed; connect to a high speed hub [ 166.375717][ T5605] usb 4-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 166.376731][ T5605] usb 4-1: config 133 has an invalid interface number: 109 but max is 0 [ 166.376749][ T5605] usb 4-1: config 133 has no interface number 0 [ 166.376766][ T5605] usb 4-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 166.376779][ T5605] usb 4-1: config 133 interface 109 has no altsetting 0 [ 166.465715][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.465733][ T5605] usb 4-1: Product: syz [ 166.465740][ T5605] usb 4-1: Manufacturer: syz [ 166.465746][ T5605] usb 4-1: SerialNumber: syz [ 166.534332][ T35] usb 1-1: USB disconnect, device number 5 [ 166.636825][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.126105][ T5605] kaweth 4-1:133.109: couldn't find required endpoints [ 167.138580][ T5605] usb 4-1: USB disconnect, device number 7