last executing test programs: 7m25.096962336s ago: executing program 1 (id=528): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x1, 0x8000, {0x0}, {}, 0xa6de, 0x8b8}) getpgrp(r0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) syz_pidfd_open(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff5a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000340)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) write(r1, &(0x7f0000000140)="2600000022004701050000070000000003000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x2, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 7m22.50702357s ago: executing program 1 (id=531): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x8, 0x80800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2160, 0x0) bind$inet6(r0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0xfd, 0x6, @remote}, 0x14) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x5}, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7m19.699166858s ago: executing program 1 (id=542): syz_emit_ethernet(0x12, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x42, 0xd4, "f3", "f4"}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000a00)) 7m17.728212365s ago: executing program 1 (id=546): set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x18c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0xd00) write$tun(r0, &(0x7f0000000740)={@void, @void, @ipv6=@icmpv6={0x9, 0x6, "9144c7", 0x10, 0x3a, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ni={0x8b, 0x0, 0x0, 0x5, 0xfffd, 0x7}}}}, 0x38) syz_clone(0x0, 0x0, 0x2c, 0x0, 0x0, 0x0) 7m17.575798178s ago: executing program 1 (id=548): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0xc2, 0x2d, 0x8000000000000001, 0x3a, 0x7, 0x2c}, 0x48) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r0, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708000000000e007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823c000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x788, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m15.970913555s ago: executing program 1 (id=554): openat$adsp1(0xffffffffffffff9c, 0x0, 0x80202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f078dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r1, &(0x7f0000000300), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 7m14.374209004s ago: executing program 32 (id=554): openat$adsp1(0xffffffffffffff9c, 0x0, 0x80202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f078dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r1, &(0x7f0000000300), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 6m34.129576016s ago: executing program 3 (id=668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x148) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',\v\x00\x00\x00p_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x800, 0x40040648, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) close(0x3) syz_usb_connect$uac1(0x5, 0xe7, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x0, 0x0, 0x55, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x87}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x2, 0x4, 0xf8}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x4, 0x0, "e0d5df08545e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x1, 0x91, "85c8b6dd08e335"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffa, 0x9, 0x8, "0f8cc0"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0xb, 0x8, "72e19da528"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x7, 0x8, {0x7, 0x25, 0x1, 0x82, 0x2, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x9, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0xe, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0xf, 0xb, "486aec35"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf0, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x1, 0xff, "27cd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xdb, 0x9, 0x1, {0x7, 0x25, 0x1, 0x1, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x60, 0x4, 0x2, 0x6cad6a4b66718f53, 0x7f}, 0x77, &(0x7f0000000500)={0x5, 0xf, 0x77, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x414, 0xf07, 0x7, [0x30, 0xf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x4, 0x0, 0xffeb, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0x2, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7aaad42525d2bab1f38504327a5bbc6e"}, @generic={0x30, 0x10, 0xb, "de5247f8d7acb163a4097999a70633caf5bbb3af27f80f28caeb83e038dd19a181601afcfb1f65a71e9264530f"}]}, 0x4, [{0xfa, &(0x7f00000005c0)=ANY=[@ANYBLOB="fa0386990226c1c15daa7babe1299dea9b41c7181942390e8c7a46d65e8d9c990428c836dd559e56e082f484e51773cc4de366a70396bc4e7360aa9d4320585e547de884262533d0a47f03735a030400000000000000b25078c1ec83a83980b92f42953d0843964cd0c60cc738fbed7ac75ffb4832bb5543246a933dbf26386f0a08438d17e3e9e0527604aa0ed03e1a4048e96c7da69a6a42b9f34e7076ffce3e77f3f69f861940f12c957336d27be8b22ebfb8fb28a555a97b839070b1561765d09ba4b8d7ed5c89736155c21ac7a2103c20c561175e0fb81585a1a37c046b4b055048097467630fb7633c7574063045997d2d61027c0e12bb"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c2b}}, {0x25, &(0x7f00000001c0)=@string={0x25, 0x3, "008d07e5a26de61d93a8a7cbfb11705582c5f5355adf5c91a909c0acb20a8dadfb61b9"}}, {0xb8, &(0x7f00000006c0)=@string={0xb8, 0x3, "f128fb2f796f5754f950c9d9c445a0eb4545cc2a46d37f46928b01bc4b24e00bb62f62dd140f0727ce01f405c4b76d97e293a8d07446b7e461ad247939be3739f72836d260cc09e7ca838d653fac660f54c4d74fabfa61d7d08e7bcd6505df878295074ce61cec0f405fd42b8ac076acafa4170dcd3bb21dc834ce204683f4bb8811bdc457ed9166049f7395ad326992da978ea59811133d9fafdef56e933177053cb869242f7a45fcd3fbff2460b244c752abca7f93"}}]}) 6m30.175099042s ago: executing program 3 (id=677): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff00"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r5, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) 6m29.857058393s ago: executing program 3 (id=681): r0 = syz_open_procfs(0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141301) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x6}, 0x18) socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x3) (async) listen(r2, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) read(r3, &(0x7f00000011c0)=""/221, 0x8) userfaultfd(0x80000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c4}, 0x4000) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c4}, 0x4000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 6m28.964295207s ago: executing program 3 (id=683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x21, "00769a0c95595915303d60ffdeffff000400"}) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0/../file0\x00'}) chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x88) getdents64(r1, &(0x7f0000000f80)=""/4083, 0xff3) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0xce24, 0x80000001, @mcast2, 0x40}, 0x1c) r6 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x404, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f00000001c0)={0xa}) 6m28.407797308s ago: executing program 3 (id=687): sendmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="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", 0x1a6}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61}, {}, {}, {0x6}]}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x22000000}, 0x8040) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}}, 0x20000080) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_dellink={0x44, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x5, 0x0, 0x1, {0x1c, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x3, 0x0, 0x0, 0xffff}]}}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_xfrm(r5, 0x0, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$alg(0x26, 0x5, 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@favordynmods}]}) 6m27.90768587s ago: executing program 3 (id=690): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f00000013c0)="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", 0x581, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010031bd7000fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0c002380060004005a00000010863972529ff9555d27ed9fceabe5068ab7ce97d5e666b11ff2c1a79dbda7e681c6dc120b482bad450eb8f6a598dabfcfb0a1ef4422bb9a7cf8df4f401d1f525896e383fe63"], 0x28}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001980)={0x0, "11e8466673387723551d0a8f9557dde9"}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000940)={0x0, 0x9, 0xff, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000d40)={0x3, 0x3, {0x7, @usage=0x7, r9, 0x4, 0x1, 0x0, 0x5, 0x6, 0xf4, @usage=0xa, 0x7fffffff, 0x19, [0x5, 0x4, 0x0, 0x4, 0x2]}, {0x5, @usage=0x6a, 0x0, 0x3, 0x100000000, 0x3, 0x7fffffffffffffff, 0x1, 0x410, @usage=0x10, 0x3, 0xc, [0x5, 0x9, 0x3, 0x6, 0x30, 0xafd]}, {0x6, @usage=0x91cd, r10, 0x4, 0x3, 0x7f, 0x9, 0xffffffff, 0x82, @usage, 0x100, 0x0, [0xfff, 0x8001, 0x2, 0xe, 0x3, 0x5b2c2705]}, {0x8, 0x4, 0x6}}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) read$FUSE(r0, &(0x7f00000035c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000300)={{0x9, 0x6, 0x4, 0x2, 'syz0\x00'}, 0x4, 0x10000000, 0x4, r12, 0x2, 0x100, 'syz0\x00', &(0x7f0000000180)=['veth1_vlan\x00', '\x00'], 0xc}) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40004000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x86}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e24, @multicast1}}) 6m27.117344493s ago: executing program 33 (id=690): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f00000013c0)="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", 0x581, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010031bd7000fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0c002380060004005a00000010863972529ff9555d27ed9fceabe5068ab7ce97d5e666b11ff2c1a79dbda7e681c6dc120b482bad450eb8f6a598dabfcfb0a1ef4422bb9a7cf8df4f401d1f525896e383fe63"], 0x28}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001980)={0x0, "11e8466673387723551d0a8f9557dde9"}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000940)={0x0, 0x9, 0xff, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000d40)={0x3, 0x3, {0x7, @usage=0x7, r9, 0x4, 0x1, 0x0, 0x5, 0x6, 0xf4, @usage=0xa, 0x7fffffff, 0x19, [0x5, 0x4, 0x0, 0x4, 0x2]}, {0x5, @usage=0x6a, 0x0, 0x3, 0x100000000, 0x3, 0x7fffffffffffffff, 0x1, 0x410, @usage=0x10, 0x3, 0xc, [0x5, 0x9, 0x3, 0x6, 0x30, 0xafd]}, {0x6, @usage=0x91cd, r10, 0x4, 0x3, 0x7f, 0x9, 0xffffffff, 0x82, @usage, 0x100, 0x0, [0xfff, 0x8001, 0x2, 0xe, 0x3, 0x5b2c2705]}, {0x8, 0x4, 0x6}}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) read$FUSE(r0, &(0x7f00000035c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000300)={{0x9, 0x6, 0x4, 0x2, 'syz0\x00'}, 0x4, 0x10000000, 0x4, r12, 0x2, 0x100, 'syz0\x00', &(0x7f0000000180)=['veth1_vlan\x00', '\x00'], 0xc}) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40004000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x86}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e24, @multicast1}}) 3m54.416615991s ago: executing program 2 (id=1115): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x40, 0x0, 0x9b, "35b5d9ae492bcba0090cb60601e98c72385e3defa612f8801a8eb91749fdfa17f7f7b52dc2c3e08e7a7c9ea2ff52ed2210de0b120657e2ae5a8e2363ea4e430397b2df10b2ccd6b1fd760789b2a20a5173cf168e3a3cdef4f862bb51fe502149bc74a3abc16011a4b5c67a0201584f7cbb873470c3734a8496292a9b1d284e5812b0d57f336214b4c17663f8f5d5c0c8ce1ce648e93e03f7136a88"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x1e0, 0x20, [0x0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x900}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0xb, 0x2, '4P'}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8000}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x19, 0x2, "5fb0"}, &(0x7f0000000180)={0x40, 0x1a, 0x2, 0x76eb}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x2b}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x3}}) 3m50.963661029s ago: executing program 2 (id=1125): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0c00000001000000000000000600000054500000", @ANYRES32, @ANYBLOB="0200000000000005000000000000000000000000076d78b1a7c90176c5e051c1a6b02e5fde5a2062", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001000000", @ANYRES32, @ANYBLOB="0001fb75", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000700)="e7c4aebff19916c5fa269a85d625fc6419b98105ac6a405c0dd62940c63a1713c2481683cf4e208f72f008d0b5cae3da64fa99fdb259338e9ad36567414987d9a944f5691b8e175babb591f7e20ec41fb9204d0f639faf78b5572f7dae0b4b896fe67e9e59d780022c83a722323cce7fec084bc3a395ce6224b33901f38760de13540725413013ac79c8a7c9858b92a51c5c1a189b7d6f879962a8464e41000000000000000000000000f506ff063d6d752251b61d1228bc3171", &(0x7f0000000640)=""/178}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x700, 0x20, 0xffff, 0x7, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x64, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010102}}}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r8, 0x731, 0x4, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x1}, 0x24008020) 3m49.262731765s ago: executing program 2 (id=1128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x8, 0x0, 0x0}}, 0x10) 3m48.727675568s ago: executing program 2 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setgroups(0x0, 0x0) fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 3m47.00159557s ago: executing program 2 (id=1136): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r1, 0x10, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000040)=0x10000) ioperm(0x0, 0x82, 0x1f) r5 = socket$unix(0x1, 0x5, 0x0) fchown(r5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f00000000c0)=[{}, {0x0, 0x4000, 0x1800}], 0x2) semop(r6, &(0x7f0000000180)=[{}, {0x0, 0x6}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000080)) accept4(r0, 0x0, 0x0, 0x0) 3m46.401293266s ago: executing program 2 (id=1137): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) 3m30.673309256s ago: executing program 34 (id=1137): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) 2m54.765541158s ago: executing program 4 (id=1254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x148) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',\v\x00\x00\x00p_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x800, 0x40040648, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) close(0x3) syz_usb_connect$uac1(0x5, 0xe7, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x0, 0x0, 0x55, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x87}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x2, 0x4, 0xf8}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x4, 0x0, "e0d5df08545e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x1, 0x91, "85c8b6dd08e335"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffa, 0x9, 0x8, "0f8cc0"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0xb, 0x8, "72e19da528"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x7, 0x8, {0x7, 0x25, 0x1, 0x82, 0x2, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x9, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0xe, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0xf, 0xb, "486aec35"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf0, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x1, 0xff, "27cd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xdb, 0x9, 0x1, {0x7, 0x25, 0x1, 0x1, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x60, 0x4, 0x2, 0x6cad6a4b66718f53, 0x7f}, 0x77, &(0x7f0000000500)={0x5, 0xf, 0x77, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x414, 0xf07, 0x7, [0x30, 0xf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x4, 0x0, 0xffeb, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0x2, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7aaad42525d2bab1f38504327a5bbc6e"}, @generic={0x30, 0x10, 0xb, "de5247f8d7acb163a4097999a70633caf5bbb3af27f80f28caeb83e038dd19a181601afcfb1f65a71e9264530f"}]}, 0x4, [{0xfa, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c2b}}, {0x25, &(0x7f00000001c0)=@string={0x25, 0x3, "008d07e5a26de61d93a8a7cbfb11705582c5f5355adf5c91a909c0acb20a8dadfb61b9"}}, {0xb8, &(0x7f00000006c0)=@string={0xb8, 0x3, "f128fb2f796f5754f950c9d9c445a0eb4545cc2a46d37f46928b01bc4b24e00bb62f62dd140f0727ce01f405c4b76d97e293a8d07446b7e461ad247939be3739f72836d260cc09e7ca838d653fac660f54c4d74fabfa61d7d08e7bcd6505df878295074ce61cec0f405fd42b8ac076acafa4170dcd3bb21dc834ce204683f4bb8811bdc457ed9166049f7395ad326992da978ea59811133d9fafdef56e933177053cb869242f7a45fcd3fbff2460b244c752abca7f93"}}]}) 2m50.27995128s ago: executing program 4 (id=1264): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x0, 0xe9}, &(0x7f00000005c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)={0x12ec, 0x1e, 0x400, 0xfffffffd, 0x25dfdbfe, {0x18}, [@nested={0x12c4, 0x103, 0x0, 0x1, [@nested={0x59, 0xb9, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @uid=r3}, @generic="1022e2ddf72ed6065b38f31d5af87498e4a7e66ca64ed11a206a00dbb59f8eacdf232798ae800910ea7d568220635778c8ec666c85e60fec90c065f7e9e57462b7a6cda83b", @typed={0x8, 0x10d, 0x0, 0x0, @fd=r2}]}, @nested={0x118f, 0x88, 0x0, 0x1, [@nested={0x4, 0x12}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="c7bc9dd22a30e6cafbd1d025182b0e5e0f6ce2dd4037fb617c68674cf1bd40d19f37b5104983410034cdc862ba5c2d47b693531f40f77dccde74a07ccf8e6aaba82ee520c9ecc472acee93cfee184613b8d0e56ef472f546d3ecd2c7e18fecc93121bb7406d05eadaee4f85b2faacb037025cd500ff5fa05594be20f0df8f836601da2f3cff1675e535a8592e8c397bff95b6f635aa55ac1a0f7dba066ce2c2c297ff1b8dfd79bde964d851abad0b394bddd764908f4f2f2d55490f0653aac459967890c68efb9343e0e17cc6a85baffa89b844d1bc993f44f82e57f4ce8e70b959f6df7dc0386be433ee898d26ed58d5bf6025acdbcc3b258108ae4cfe3b78817cafdfc2bfff6d34a10913f5b36c66f846b29916d54238876f76e7c4f46ba24b8a7355e2e685e458aa58ef9c77745fa4b692f11fec56e30fe509413ba96890f30c907be6ec543dfe5958959986a7a7b13112b11f7269591fe266bcb5898425ba5719568a58fec8979963a8e9ebc6ae2b9824a73e71f5abe3aade15e9f662132c5ef5b7af47cefabd7bbeae8dabcd480a1603effae87989d68caf1129541d4ec54ed0deaa37a1b0c6692ed143ca0ebdef75aa3f64ccb182f3e55d31845ae27666fb60ade7c8bd04bb86d1b758a8a6547c58cd404ddf4612f89a7b51de28b79e62c09d2c95e3dac70eb7d59ebdb84dc05668e1405db84e9f364921003b93c6eb043fa84ae39f1e35b60d8199bcf4d393aa97a2176c51865625830207ecf1c9cbe596ae08c491421ccc3388b6bc279f6c9c6a350ace277daec0cda4f106960e7dd552b8f71e82e26008f19f67aa73252d69b7b8c0ae832cd7a070787b5b574c34237b0e45641ddf09163ce4b83f767f752c7874fd59fa0f068f1e1e22b4bdf8d091a6e9294f628208e8c020f9cbbcdaed7c6190f9c717149cd207737ba7744677dae868008ec73f9458bfb99df2adb548dbc395b015c98c1eff83959cfa429691dffb2cfa9c6aa78c71436b002c210b1978c3d061ad3769029979b7c296d83c1c6646880a4f64553b4890f399de17a4a73419b6c2c6fb9fe4d67c61ec0ba08b005855746f3dd77627f40eaaccad36dd12b8db9438ca22ce3b9b0f0c97fd57b92d3a233878a657e4ca4716ffd8a03891b4459ddb7fb56dc08704fa9b8d853aa848c68349a2daf68361d2bf473227e3eee42d358865d2eace07f101afec65d5fbb69a09977b809de06188a9946e3ec7be448ad614252aa65666789d24b9acab28caff9fde67d3efde67b0d80daaaa391dad8734980905965591fdf2116c93244dddea1cdd77d61b5512e63a9d0d024f2c07b8fda98772f8104f76bf6c7f2786c36f9ff52a1019148223b8532c8f78b0f0b229f4a26b6c92068b274f6955069e3437687e8b7fa96c32268e4828456e542036226a3672f2b8fe3bb7e7b21cfdeb5669e604f850fa78bc565df55db5a61a5e6a860284d93bff5a6a0d51302f278fad341e29897c01773789c26cc6553093ac2585f7738657ec7aed64b268de0167c70474d2ca61638024cf4eea995945d2fafea1a7c3976b1985b9aaf3bf82d5eedee313c5806bf4f110841572ab6cd13979a65e4c2103dd06f415f48aa1716ff883a3db28dee8b67cc322a9f143d0d13c17b535349a9c8f518eaf2565d90440b8a6f2f0403bb69bf7f65e939d59bbdfc851a79592ed7c0b02f305835ea5f8644e834f82b7330d955201268c6b77abf596fbefe814e2841a181b0141d685e14d71918259132de1cdfe9aff5b58392501e17bb09909685296ce09143df1c3cfb9b4dbfb2e9a7ac53a225d46fb6185b4baa334323d8bc51e1a8697abd9e39257f83cac2e65b2fd2143d38bdbbd78616c4032992607ee8b26b37a89c0f38a2f5d3d6ca0127c0e01b2eabd17c37e585c46f5a60f0b2e2ba5915cf3650b4ba0c6a4f9c0e353441617017ed13189c845c06cb9a30197ceb80e4a9ec33cab93121a98b49a56a3c986b4c75bb1c13b3cf46351aa01acd941b6a8844676f3d81d358ec90b7984ee487ed7658302b3616e7c97f0f82f9cc43878a60e915a0ff7604379cf81db8eeba13d1e6e09fb648baf27cce4b022930e2596ec6db3fbb879b3a12524571e51fb8fb67cb663f88fcbe94f81201a5b1f28c6f12c3388138088e16cb4dc594fbf55dd66814e7dfbd0ef4edb0ec61ed5bc84e8c811edbd5a61d40667e0ad3b8e12d42757abde22acaa400f06731b18e8fed623181e59b34a6ea31b16cd77fa847a0194836e3482e5a108192bcf9db16da2d28cb280f46bd8f8cfbb20754a325c0ff500267ca01a0959b300a9667cbf583b6955d8ff4300d94b4eeb0874f7fc56e71fb148340fc1c64d0f0859774b3c60cfdcab3d1d1ca3d6af35fda5c264b9711611ac0c180c146b4642b2b68ec4ac067826861c16328f18bc5e652dff7defd712b089b8e4ab0fb1de157a0ba05af90b71dd37d230eb64fe11590650992ced33c67e36f47f92da871e526b0771f6606ec387201a430c07f2a7a521b243c1d8b15e1f68f2a7b83b8e7214164b1894a4aae744e8bae29c4170f1644df4c37314a2253f4c2bd5a73fbe80ee3f8e03d644377dfae919ebb5f63dbdec1684e7b08caa7b57e95109dc485e49ba0b544bcf596645031afce605029c09df09dcfb89528d58c16cf777cb16b92fe43140e53ffd668e4d70c5349726a1b523a692f16ea95b76a11c530a33268ca508b74c64b53a957cfefe4c6ef78a4b97408937b6b4a7dc733beaacfff7c9cbaa1d8e49ecb80ac87c344d41ad750f797691e3895b78958f69cc4cad2d8513c09284a4359aa920e16ee1689803836e3c5d613784a454e55faf4b63fc999cad36294e4d79a2332e8a0d0824df88c619de5f2b87e9d08d7fe54d1c06078fd60ebb541621c9a34bf1758586981f0149123b75d257900aaa70239698820718fc87b5fca08c0ad97395b7a04ad6289999a2e828349f54a25ae4a632fda165c04fbe7609973b97a5021babd34249158491ffc8e73b26c030951f08bc1279ac4b5400d37b48aa08a30a6f1f1241997ee53515889d364c11fe10be004ab5a51ca35743d0f1b43a19be0a47a821a9c92aaccd8d852fc01f84b45f39a4a701826c70f1dd2b43a06c58d568224abf0ffe6b915bd0b28b554e03942f041abd7c6ab9e1b78e593c773b59f60ac0c0e8cf953be02e5e6f0f7d8d192d870007f11029ac97c549ab4b65cabecfd0b5a52c5a8871094d634c6c26e41fde6ba434abb9144ceb9d21501111d216be7c93e80bd3281c4a0eeecb19b9342147931304260f4f8cba00fae050efedf7eaf3a5e200ce6ab2f28dea991ef2f11527b6b75c25d74f55cb6410b14a934c115b12c9b83d6317f461d832561b3b597f698dc369bb3c34f0cdb01061ed0d764f54e530065da4dd6c388cc4f247c93d6d7bc7ac844e6e7d7f2614e39676ccb45ff832583bfb23cf80d29984f1cd083921da4ab4c2f01afad306f51bd74f3b246b540dc57ea7c20e6861738de6fa4d8d57e227f58b1c1c077636b814f0a6cc962333818592583e419f511869338ce30a3cb8af6647720512af7f06aaf367c6c9e1de582c7d06ff5c98941210d0ebd4ad716377bd38e116f77868d3090d69fa60d0d7e9241078e90ab1b1eb16a7e2049b3d9f43fbfda4487045916dcf814fcdeececa687471e59e974300184d58518864824cd053553d64bb044f9fc413e76c6ca3585640c4545ab6c81bd5426fdcc28d1c9ecaf806c4336aa7ca6083966c4d050cbb5af348f0434b3639efeb864434ad80e9d518c69edfbbf658c032b1a2d3c416e1117f5ccf24970708c90d1bdb062166badce88b299c898fc0810f9e98f8afee23e5e6881549207f6506ce030265fb54f063168191216e49bc6257092fa4562062413717cca59aecab4c30a236f2ee8443f181c0480d4ae4e694f95ae7c70cc837005797e13b3fcf6d0c9bdab3874b8e4117fcc38e895bdd9a714d5481483d82e995c26c48ef8298d449859462a7fe04ffebf3e19ce3a2fc693044531f2d5e91385014e4bd49846063efccdf0edce71c55da7065921f3b3f0859b388be1c37346302857fafb5e5b441a2ec203adb8c4b0efc9afc8d789792654d355381bed93b9932b303e9fc4fa4a6b93bad5fa06e4c9fde5f29583fc0054734c03c66222c88749fc719850992ae74336951b4a3f8fbdda86da5340e7a526b197a47af17177c79849515ee4190fb5802e72ac9f278097bf75f91c44a49fe2f7578ab0088a5504a206974267e8d96d67164aec26d01d1f81ed585863a14b0f19ee2a77efb52d6c69c2d8cf4078e2d7e7b86b66320f8d702fbd347a2dc0e46b478d3db05e7e2af9c1696a4859ce1bd41185837a20ea01faaef10de884055b940f94a3c5108db2196858e5c1fee730414d273d136295a0740aea786e9dfe8f3671ee334a5d8beb57472477754eea7cf51193aaf5d6b9daaac204b7696a72e4e875ab0462aabac5424331d13d5882a598d7be517681cfc688f8530574c5a31e112763a7b7b3e7f38b5144044b7ff72d01d848d21c4dab47968c7f4f48e401dd23e485740be214741521e6cc20fead69637bd89571a3c33b647719b594958e95b5beba95367ceff33546f304fe51f8083de1afbbcdfae099f2552f70853e264d657193307729683f2e3777ba4ba1d411d8a0eaacdada0621da3af2757298d975ebe8e0a2fbf031f1ccce973e890d35b734d827bd641014cd302a29827d5e3d69e2fa82187dc083f0260e206dd84132d0105819b712f3f9d2f132855c6595ac369990e2d6ba842e19107983698c2199f460002e9a6bbf1570fcd6145c5f0b0cc32309e7dbbf78aee87306e8c8456194ff2981cef12fe18b0ac402814a9f788849399c1def434b6be34c89479fda0d0baa5d0df554958525ac5032589d263e32e8b29d10d4b3dfc0f278bee47a4aa63f45f752a68921c3a6c564ded0afa3a977d3bd36d010b15f377cce8fa757545990d90049798f8f3c60b9f01b388888fb514c7b8ae5761ef0c368e3eec6c8c11e680e919b06ae7ab7b82519b511cafa3247fbc36f44659e4c52ceb9248c50598ba78ef5195a8c412271c8b141c8b3822dad18ae8b62d8c5ee65187036c26cea6538abd1f8446e3e4edda272136678d1798c42eafe8291a6c821653cb40a559cde78841d52fc4808c9129e48cdaefe974d05053ced3ddef8eae90e3165415cb62e26e1d5a98d61fca97aa9976414d14c4bbc290ebd259401bc94a4721ce8424987a8c99660da3151d8ecdfed3702b63cd99d421b4b413fb120717cf474aaceec11bb28f9454706aa6dba6ab47c754de5bd8b28bba3560833dc89e90896b00e07264e0fab7b8746928026bf7521951c1cf877a10064f13043762feb0a342084077f285224c35c01c4ca385af5623e0eacc2fc8cf2171011908f2ccd47008231c9a89caa769b05b6096187b645d2d920e5e7205d4db0af90093115a70fa446c7047a35ebfa5e4730d3a688586da0a748aa11b39d1c6429bc97a68d0cd9e9cdb21aa68b64e2d4aa5d6bade9fca02e2a7ced7653636cfef5f73939bbdf6ddf0b370ccc043add64aba1ef0cb819395ae8bebbf39709db57c10b217f9aa0b7b7d2ec127f1ccc8128743788fa8f86d6f8794ed8f5bd4259793694b580f1fc5870a08ed7d6cefd4349e6adffc6916d5309d109d9f9d4df32e020067f59552e719d44bbae79bcb4aa8a9585eabfe64dec8ae15087906f88acc86bcb92fd637348bdc0702928a3d4aff6b886b568237f1e62d246c23a67", @typed={0x4, 0x4e}, @generic="de99a032d4375491ac18af26db417c59e147acb61540de5646ec292e7a75c021a6c73f3ecd6aea05c3482ccec355c7b176dfd46621960e6b4734696867122045392213a47350cca7c1ebb3c8e562a14fd4273a49a9be7ba2202c7e83089504497dc78b361aab016c2136938e65b9e4b2c6403d719055252950fbc7d324f39f690220c6005aff220cb31e30a4669fc106ca04ba1b00a960cb3ae14d162c517adb9556c23f5ec81f3aca066e37dcdddb0bea8028de97e8d4c3d39466873700daaa88bf421caff902ec92856e91076ba3cb71cf1e97427e63596ad4cd2ad7305906e887f9bda47edc50aa4a73fd49c66bbe20f036", @nested={0x4, 0x6b}, @nested={0x4, 0x48}, @nested={0x4, 0xfd}, @typed={0x6d, 0xa4, 0x0, 0x0, @binary="8e3e373c005477dc094627f216c18598f782b5fc55f53ae3cc344eeca8ec74d3e1993059f003cd8543152b639e135c4a34a434a01d13a7431d7d70810c18ebdade43aa3175c075fa4d646b29f352f92c5794672f52101067fd98099aa5de110e71101718ad92c9f844"}]}, @typed={0xd4, 0x6, 0x0, 0x0, @binary="4b4af203a4db756226c8e9a500f9645d3b8c7fb5e7d98a4dfb7819a78c19d63d7a04e018b96f952218eb4f020d1ebc53217bcf09b5024acb649c4a99b9a465728010233725f4e507a791d1043a51e322a61f9572b37f1f1caf3d967a34c14bd94bd318c3ae08069d352f38943821c5d20ab82c5d9442413dbb9bd4ca610e704ad63b02f4bf4d2cba8c93f4ab0de808adae47bcb2fef04134203b9baf4911384c326fcac7c6b83d1eadebd87c74580d2a8f6eb5c797220ce4c31dec0a09ddaa0ef80233577dacfc7c09db8931ca2c5669"}]}, @generic="91b9c482379b799333c34ebcd7dadaf5f05029b8"]}, 0x12ec}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000300f7ff0700040000000000b5adec41d8cc15bf0be4438cc62d78e866d091c933ae65c068a67a85c8c2ad64a234e993defaac07b36d10795309e58f77151a390bd6c84a2563be574dd8d40ad81fd2290229ae000751f29d3f1b9ff94ef79a700809415e7a775cd029af23e5351e04fc68cc874d0a0a93d7e654855eedb59d630f0459d6c987e0ce658e6cc3fd0af7a0c29b85e9fed99e18ec5a94843696f9da89e7b6eea7c5d4d0f1713d89cc820dd017e7ce5e4e62600d5d3698056c543817f7eeb14fd08a67fce6582700000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8024) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000300)={'veth1_macvtap\x00', @multicast}) r11 = socket(0x11, 0x800000003, 0x0) recvfrom(r6, &(0x7f0000000380)=""/34, 0x22, 0x40010023, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) socket$inet6(0xa, 0x80807, 0x6) syz_emit_vhci(&(0x7f0000002340)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x7, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, @none, 0x7}}}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x9}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x5, 0x6, 0x2, 0x7, 0x401, 0x300}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 2m46.608902527s ago: executing program 4 (id=1270): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000080)={0x2, 0x4, 0x1000, &(0x7f0000000b00)=""/4096}) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000004180), 0xff77) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003780)=""/6, 0x6}, {&(0x7f0000003900)=""/52, 0x34}], 0x2}, 0xffffffe9}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x7fffffff) r5 = dup(r1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r7 = socket(0x10, 0x3, 0x6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7c}}}}}, 0x28}}, 0x0) 2m44.916326931s ago: executing program 4 (id=1274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x148) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',\v\x00\x00\x00p_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x800, 0x40040648, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) close(0x3) syz_usb_connect$uac1(0x5, 0xe7, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x0, 0x0, 0x55, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x87}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x2, 0x4, 0xf8}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x4, 0x0, "e0d5df08545e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x1, 0x91, "85c8b6dd08e335"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffa, 0x9, 0x8, "0f8cc0"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0xb, 0x8, "72e19da528"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x7, 0x8, {0x7, 0x25, 0x1, 0x82, 0x2, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x9, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0xe, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0xf, 0xb, "486aec35"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf0, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x1, 0xff, "27cd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xdb, 0x9, 0x1, {0x7, 0x25, 0x1, 0x1, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x60, 0x4, 0x2, 0x6cad6a4b66718f53, 0x7f}, 0x77, &(0x7f0000000500)={0x5, 0xf, 0x77, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x414, 0xf07, 0x7, [0x30, 0xf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x4, 0x0, 0xffeb, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0x2, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7aaad42525d2bab1f38504327a5bbc6e"}, @generic={0x30, 0x10, 0xb, "de5247f8d7acb163a4097999a70633caf5bbb3af27f80f28caeb83e038dd19a181601afcfb1f65a71e9264530f"}]}, 0x4, [{0xfa, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c2b}}, {0x25, &(0x7f00000001c0)=@string={0x25, 0x3, "008d07e5a26de61d93a8a7cbfb11705582c5f5355adf5c91a909c0acb20a8dadfb61b9"}}, {0xb8, &(0x7f00000006c0)=@string={0xb8, 0x3, "f128fb2f796f5754f950c9d9c445a0eb4545cc2a46d37f46928b01bc4b24e00bb62f62dd140f0727ce01f405c4b76d97e293a8d07446b7e461ad247939be3739f72836d260cc09e7ca838d653fac660f54c4d74fabfa61d7d08e7bcd6505df878295074ce61cec0f405fd42b8ac076acafa4170dcd3bb21dc834ce204683f4bb8811bdc457ed9166049f7395ad326992da978ea59811133d9fafdef56e933177053cb869242f7a45fcd3fbff2460b244c752abca7f93"}}]}) 2m41.627052466s ago: executing program 4 (id=1284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000010000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0xa) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r5, 0x0, r6, 0x0, 0x114, 0x0) r7 = open$dir(&(0x7f0000000380)='./file0/file0\x00', 0x101000, 0x118) fcntl$setpipe(r7, 0x407, 0x1000000) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r9, 0x164, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703080000f8ffff840000007000000095008682792b2d4b", @ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x58, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x21, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="39052db97000ffdbdf250500000008000300", @ANYRES32=r2, @ANYBLOB="76b8fdf301"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r11}, 0x20) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x2, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x5, 0x1, [0x4, 0x3, 0x6, 0x2, 0xfffd, 0x80, 0x6, 0xf96e, 0x8, 0x8000, 0xb, 0x8, 0xb, 0x4, 0x78, 0xff], 0x7}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f00000009c0)) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) 2m39.993160723s ago: executing program 4 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m24.545961214s ago: executing program 35 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 1m32.157159637s ago: executing program 0 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14c8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m12.203249056s ago: executing program 0 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14c8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 57.483911796s ago: executing program 0 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14c8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 40.430295997s ago: executing program 0 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14c8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 28.45448334s ago: executing program 0 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14c8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 14.267636288s ago: executing program 8 (id=1677): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x8000007, 0x7) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000007ca087753a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 12.465375343s ago: executing program 5 (id=1682): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854000203010902240001000010100904590002ff063d"], 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x8404) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0x9, 0xf}, {0x2, 0x9}, 0x10, [0x3ff, 0x5, 0x400000000000, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0x2c4, 0x5, 0x4, 0x40, 0xdaa, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) mknod(&(0x7f0000000040)='./bus\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) 12.019466757s ago: executing program 8 (id=1684): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 10.543597607s ago: executing program 8 (id=1687): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854000203010902240001000010100904590002ff063d"], 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x8404) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0x9, 0xf}, {0x2, 0x9}, 0x10, [0x3ff, 0x5, 0x400000000000, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0x2c4, 0x5, 0x4, 0x40, 0xdaa, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) mknod(&(0x7f0000000040)='./bus\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 9.93538654s ago: executing program 0 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14c8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket(0x1, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.950802745s ago: executing program 5 (id=1689): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x168) listen(r4, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0xc0403d11, &(0x7f0000000040)={0x17}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@remote, 0x4e24, 0x5, 0x4e24, 0x7, 0x2, 0xa0, 0x80, 0x73, 0x0, r8}, {0x3, 0x7ff, 0x80, 0xdb3, 0x9, 0x3b, 0x13d}, {0x8000, 0x10, 0x9, 0x6}, 0x3, 0x6e6bb4, 0x1, 0x1, 0x808e60c85fa79ff7, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x33}, 0xa, @in=@remote, 0x3504, 0x3, 0x1, 0x6, 0x2, 0x2, 0x6}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) 7.458679121s ago: executing program 5 (id=1691): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40090100}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x4044010) 7.438541576s ago: executing program 8 (id=1692): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x7, &(0x7f00000000c0)=""/205, 0xfffffffffffffd60) 7.186404854s ago: executing program 7 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a"], 0x3c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r1, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x20, 0xe, 0x3, "6929a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.88782861s ago: executing program 6 (id=1694): inotify_init1(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) getrlimit(0xe, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x110, 0xd, {[@noop]}}}], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x3, 0x5001) inotify_init() syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_io_uring_setup(0x119, &(0x7f0000000300)={0x0, 0x1860, 0x400, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x300, 0x0, 0x0, 0x0) 5.83150137s ago: executing program 8 (id=1695): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x8000007, 0x7) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000007ca087753a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.3459083s ago: executing program 7 (id=1696): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x168) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0xc0403d11, &(0x7f0000000040)={0x17}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@remote, 0x4e24, 0x5, 0x4e24, 0x7, 0x2, 0xa0, 0x80, 0x73, 0x0, r7}, {0x3, 0x7ff, 0x80, 0xdb3, 0x9, 0x3b, 0x13d}, {0x8000, 0x10, 0x9, 0x6}, 0x3, 0x6e6bb4, 0x1, 0x1, 0x808e60c85fa79ff7, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x33}, 0xa, @in=@remote, 0x3504, 0x3, 0x1, 0x6, 0x2, 0x2, 0x6}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 5.310916889s ago: executing program 6 (id=1697): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x168) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0xc0403d11, &(0x7f0000000040)={0x17}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@remote, 0x4e24, 0x5, 0x4e24, 0x7, 0x2, 0xa0, 0x80, 0x73, 0x0, r7}, {0x3, 0x7ff, 0x80, 0xdb3, 0x9, 0x3b, 0x13d}, {0x8000, 0x10, 0x9, 0x6}, 0x3, 0x6e6bb4, 0x1, 0x1, 0x808e60c85fa79ff7, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x33}, 0xa, @in=@remote, 0x3504, 0x3, 0x1, 0x6, 0x2, 0x2, 0x6}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 4.819010268s ago: executing program 5 (id=1698): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x26, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="20000000000000001850000000000000000000000000000018400000f8ffffff000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0xfffffffffffffde0, 0x2, &(0x7f0000000940), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.793258509s ago: executing program 6 (id=1699): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000940)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={0x2, 0x5, 0x8, 0x3, 0x70, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x62}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x22, 0x34, 0x14}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0x8, 0x4a, 0x2, 0x40000000}, @sadb_x_sec_ctx={0x1c, 0x18, 0x5, 0x0, 0xd5, "dd13f9986eb9077240e352dd37b5b2a6d861224f01cb79e41ff663f769bc9bbd3abeb19ef1527c6609a6d6a0e0030b7ff10b16b123cc7bb5d22d03f3350854c2a12c6139c70ec5fd642e67e9d5add1982a54726961e2695535b56d4b91dee3f11f32258b4acb89871aaaf6e82880acb33822e145a9e31a9114b509433024339b414340404ab1c03d39a9447fe721ef57fdb30d6f82e1f240146e23e7958ed72d16f69c1557ce50527cd83318a8cab3c9ed94ab454916f005d8f76ed3bd2a4b8257dd38140db2a07be930e9d380fb42a6d6fa90d163"}, @sadb_lifetime={0x4, 0x2, 0x1, 0x10000, 0x9, 0x7}, @sadb_key={0x20, 0x1a, 0x7c0, 0x0, "f51c0bfe70ed12f21326803f68b69251e809ff76840bf1f1a340dc9a0fa01db849a7bb8e84e20a39263f130ea8d7684478f0d717a72de51a1d9e4e694945d13cb497903b9a9628735b396703eb7d4f7fc24521ae787647495db1db001e02c2a3c4aa01fc3887c6dc1f37af5cec57eb1be6fdc7a709625490fdb321715ca10110612da0558b36e9ca5d3a8fa040ef5fc0d8590dbadbb4bd6f59f214d477a440a816c20eaf670b86db76e68e658f5b10f6edd0596feb130dc9807649207f696d752fbc0b4c1c28325a7c4a2c01cdf806351ad78f942c8a7c10c75e4c5caf062ee219ef29b0f2ccf4330b42b41031745f3dca4236339e0be2e2"}, @sadb_key={0x1e, 0x8, 0x730, 0x0, "3a0d16ede0c67f5c08cf7e58e4e9ebdab210ba3f2eaf54e86a186219fa96d665d4068b459d000d508294c0d50bc8fc77a1fc5d03c85c0494cea06dd2c6b83a8a1d6fceb58b0c1222db95e2aba63d9801701191ab8ad3095030e59b1cbae1223202259ba744fe7942c12e7ca83ef887bf5e60fe68b39a29da434328de85fccd5bf69ad708dd592d2ecf45d0e0256491a956d2025a028e5345afc8c268f689169d315802ae7f233d9626c48ea7811f0883239936f4343ab1d60f639090844eb7dcbda926f23ab495f7285a952b5364b08da01070004b8c67daf297b6f37081b419f68c178a9c04"}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2d, 0x3501}]}, 0x380}}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r8, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0401000010000700000000000000000064010100000000000000000000000000e0000002000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0a010101000000000000000000000000000000002b000000fc00050000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000001a3356599d0000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000000000000000000000000de0000000000000a0002000014000e00fe8000000000000000000010000000bb00000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x6c0243, 0x0) 4.727845775s ago: executing program 7 (id=1700): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 4.535436466s ago: executing program 7 (id=1701): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = getpgrp(0x0) sched_getscheduler(r0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x2589, &(0x7f00000000c0)={0x0, 0xb3e5, 0x10, 0x2, 0x2f7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) membarrier(0x10, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000", 0x3c) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a010000182b0000000000000000000000000000000000fe8000000000000000000000000000aa060202"], 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(r1, &(0x7f0000000000)=0x2, r3, &(0x7f0000000180)=0x10, 0x9b, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a010300000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000260140001800c0001"], 0xe4}}, 0x0) io_uring_setup(0x4920, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x2, 0x63, 0x0, r2}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000080), 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r7, 0xffffffffffffffff, 0x0) 3.801967969s ago: executing program 6 (id=1702): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x168) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0xc0403d11, &(0x7f0000000040)={0x17}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@remote, 0x4e24, 0x5, 0x4e24, 0x7, 0x2, 0xa0, 0x80, 0x73, 0x0, r7}, {0x3, 0x7ff, 0x80, 0xdb3, 0x9, 0x3b, 0x13d}, {0x8000, 0x10, 0x9, 0x6}, 0x3, 0x6e6bb4, 0x1, 0x1, 0x808e60c85fa79ff7, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x33}, 0xa, @in=@remote, 0x3504, 0x3, 0x1, 0x6, 0x2, 0x2, 0x6}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 3.265076054s ago: executing program 6 (id=1703): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x4000, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x53) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xc) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) unlink(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket$kcm(0x10, 0x2, 0x4) 3.06436117s ago: executing program 5 (id=1704): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(r0, &(0x7f00000003c0)=@hci, &(0x7f0000000080)=0x80, 0x800) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000040)=0x10000) ioperm(0x0, 0x82, 0x1f) r4 = socket$unix(0x1, 0x5, 0x0) fchown(r4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r5 = semget$private(0x0, 0x6, 0x0) semop(r5, &(0x7f00000000c0)=[{}, {0x0, 0x4000, 0x1800}], 0x2) semop(r5, &(0x7f0000000180)=[{}, {0x0, 0x6}], 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.273450091s ago: executing program 6 (id=1705): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x40b340) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x7) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x4000002, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x64, 0x0, 0xfe, 0x4, 0x0, @loopback, @multicast1}}}}) 2.272887179s ago: executing program 8 (id=1706): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854000203010902240001000010100904590002ff063d"], 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x8404) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0x9, 0xf}, {0x2, 0x9}, 0x10, [0x3ff, 0x5, 0x400000000000, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0x2c4, 0x5, 0x4, 0x40, 0xdaa, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) mknod(&(0x7f0000000040)='./bus\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2.155541164s ago: executing program 5 (id=1707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a"], 0x3c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r1, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x20, 0xe, 0x3, "6929a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 159.892139ms ago: executing program 7 (id=1708): ioperm(0x0, 0x82, 0x1f) semget$private(0x0, 0x0, 0x22) membarrier(0x10, 0x0) sched_setscheduler(0x0, 0x1, 0x0) membarrier(0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev, 0x9}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) 0s ago: executing program 7 (id=1709): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854000203010902240001000010100904590002ff063d"], 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x8404) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0x9, 0xf}, {0x2, 0x9}, 0x10, [0x3ff, 0x5, 0x400000000000, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0x2c4, 0x5, 0x4, 0x40, 0xdaa, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) mknod(&(0x7f0000000040)='./bus\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') kernel console output (not intermixed with test programs): uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81d5785d29 code=0x7ffc0000 [ 600.172552][ T29] audit: type=1326 audit(2000000164.340:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.6.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5785d29 code=0x7ffc0000 [ 600.222311][ T5899] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 600.223030][T12880] fuse: Unknown parameter ' ' [ 600.394994][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.406120][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.417192][ T6567] bond0 (unregistering): Released all slaves [ 600.430117][ T5899] usb 9-1: Using ep0 maxpacket: 8 [ 600.445999][ T5899] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 600.459363][T12854] pim6reg1: entered promiscuous mode [ 600.465175][ T5899] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 600.474827][T12854] pim6reg1: entered allmulticast mode [ 600.482122][ T5895] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 600.485325][ T5899] usb 9-1: Product: syz [ 600.494804][ T5899] usb 9-1: Manufacturer: syz [ 600.499512][ T5899] usb 9-1: SerialNumber: syz [ 600.505987][ T5899] usb 9-1: config 0 descriptor?? [ 600.532356][ T5899] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 600.549930][ T5864] usb 8-1: USB disconnect, device number 21 [ 600.745649][T12878] nicvf0: tun_chr_ioctl cmd 1074025680 [ 600.814543][T12838] lo speed is unknown, defaulting to 1000 [ 600.839892][T11996] Bluetooth: hci5: command 0x0406 tx timeout [ 600.869965][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 600.891408][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.906841][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.930200][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.939693][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.947931][ T5895] usb 6-1: Product: 贀涢ᷦꢓ쮧ᇻ啰얂㗵酜঩곀લ궍懻 [ 600.956441][ T5895] usb 6-1: Manufacturer: 㰫 [ 600.961163][ T5895] usb 6-1: SerialNumber: ⣱⿻潹呗價䗄䕅⫌퍆䙿讒밁⑋௠⾶༔✇ǎ״럄靭鏢킨䙴굡礤븹㤷⣷툶챠菊斍갿ས쑔俗磌흡軐쵻ե蟟閂䰇᳦࿬彀⯔삊걶꒯ഗ㯍ᶲ㓈⃎荆믴ᆈ쒽暑鼄镳㊭鉩韚ꖎᆘ㴓꾟鍮眱㰅榸⼤䕺폼怤䒲勇쪫鍿 [ 600.967635][ T6567] hsr_slave_0: left promiscuous mode [ 601.051102][ T6567] hsr_slave_1: left promiscuous mode [ 601.065087][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.072829][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.095565][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.124609][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.159274][ T6567] veth1_macvtap: left promiscuous mode [ 601.166058][ T6567] veth0_macvtap: left promiscuous mode [ 601.172943][ T6567] veth1_vlan: left promiscuous mode [ 601.178967][ T6567] veth0_vlan: left promiscuous mode [ 601.223282][ T5895] usb 6-1: 0:2 : does not exist [ 601.246190][ T5895] usb 6-1: USB disconnect, device number 39 [ 601.310412][T11996] Bluetooth: hci4: command tx timeout [ 601.727277][ T5899] gspca_zc3xx: reg_w_i err -110 [ 601.839847][ T5899] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 601.945168][T12896] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 602.646274][ T6567] team0 (unregistering): Port device team_slave_1 removed [ 602.733799][ T6567] team0 (unregistering): Port device team_slave_0 removed [ 603.420163][T11996] Bluetooth: hci4: command tx timeout [ 604.532364][T12838] chnl_net:caif_netlink_parms(): no params data found [ 604.960148][ T5895] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 605.125813][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.136763][ T5895] usb 7-1: config 0 has no interfaces? [ 605.146874][ T5895] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 605.191982][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.206467][ T5895] usb 7-1: config 0 descriptor?? [ 605.369331][T12926] gtp0: entered promiscuous mode [ 605.377257][T12838] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.384767][T12838] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.392559][T12838] bridge_slave_0: entered allmulticast mode [ 605.411458][T12838] bridge_slave_0: entered promiscuous mode [ 605.446001][T12838] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.463360][T12838] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.470719][T11996] Bluetooth: hci4: command tx timeout [ 605.693240][T12838] bridge_slave_1: entered allmulticast mode [ 605.700628][T12838] bridge_slave_1: entered promiscuous mode [ 606.290197][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 606.290234][ T29] audit: type=1400 audit(2000000171.090:3598): avc: denied { watch watch_reads } for pid=12928 comm="syz.5.1509" path="/240" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 606.682085][ T29] audit: type=1400 audit(2000000171.140:3599): avc: denied { watch watch_reads } for pid=12928 comm="syz.5.1509" path="/240/file0" dev="tmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 606.719892][ T29] audit: type=1400 audit(2000000171.140:3600): avc: denied { bind } for pid=12928 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 606.740290][ T29] audit: type=1400 audit(2000000171.140:3601): avc: denied { write } for pid=12928 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 607.455998][T12838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.516247][T12838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.581093][ T5928] usb 7-1: USB disconnect, device number 24 [ 607.946381][T12838] team0: Port device team_slave_0 added [ 607.956221][T12838] team0: Port device team_slave_1 added [ 608.031970][T12838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.038930][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.066319][T12838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.080246][T12940] nicvf0: tun_chr_ioctl cmd 1074025680 [ 608.101401][T12838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.108491][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.116147][T12940] fuse: Unknown parameter ' ' [ 608.153716][T12838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.233321][T12838] hsr_slave_0: entered promiscuous mode [ 608.247813][T12838] hsr_slave_1: entered promiscuous mode [ 608.254477][T12838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.262298][ T1198] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 608.278233][T12838] Cannot create hsr debugfs directory [ 608.570341][ T5928] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 608.650069][ T29] audit: type=1326 audit(2000000173.360:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 608.818205][ T1198] usb 8-1: Using ep0 maxpacket: 32 [ 608.826267][ T1198] usb 8-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 608.838168][ T1198] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 608.850421][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 608.850965][ T29] audit: type=1326 audit(2000000173.360:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 608.885353][ T5928] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.891054][ T1198] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 608.895663][ T5928] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.911067][ T1198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.931147][ T1198] usb 8-1: Product: syz [ 608.935609][ T1198] usb 8-1: Manufacturer: syz [ 608.935713][ T29] audit: type=1326 audit(2000000173.370:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 608.944882][ T1198] usb 8-1: SerialNumber: syz [ 608.978919][ T5928] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.980883][ T1198] usb 8-1: config 0 descriptor?? [ 609.005909][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.007011][ T29] audit: type=1326 audit(2000000173.370:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 609.037978][ T5928] usb 7-1: Product: 贀涢ᷦꢓ쮧ᇻ啰얂㗵酜঩곀લ궍懻 [ 609.047239][ T5928] usb 7-1: Manufacturer: 㰫 [ 609.052031][ T5928] usb 7-1: SerialNumber: ⣱⿻潹呗價䗄䕅⫌퍆䙿讒밁⑋௠⾶༔✇ǎ״럄靭鏢킨䙴굡礤븹㤷⣷툶챠菊斍갿ས쑔俗磌흡軐쵻ե蟟閂䰇᳦࿬彀⯔삊걶꒯ഗ㯍ᶲ㓈⃎荆믴ᆈ쒽暑鼄镳㊭鉩韚ꖎᆘ㴓꾟鍮眱㰅榸⼤䕺폼怤䒲勇쪫鍿 [ 609.132051][ T29] audit: type=1326 audit(2000000173.370:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 609.156520][ T29] audit: type=1326 audit(2000000173.370:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.5.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 609.393376][ T5899] usb 9-1: USB disconnect, device number 11 [ 609.398097][T12838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.403096][ T5928] usb 7-1: 0:2 : does not exist [ 609.412868][T12838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.426944][T12838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.437373][T12838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 609.457032][ T5928] usb 7-1: USB disconnect, device number 25 [ 609.605162][T12838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.637205][T12838] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.685893][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.693084][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.705181][ T5899] usb 8-1: USB disconnect, device number 22 [ 609.741662][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.748762][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.850655][T12959] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 609.857215][T12959] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 610.064631][T12959] vhci_hcd vhci_hcd.0: Device attached [ 610.340564][ T5866] usb 50-1: SetAddress Request (2) to port 0 [ 610.370253][ T5866] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 610.414246][T12960] vhci_hcd: connection closed [ 610.416312][ T6939] vhci_hcd: stop threads [ 610.476263][ T6939] vhci_hcd: release socket [ 610.510945][ T6939] vhci_hcd: disconnect device [ 610.912092][T12974] No such timeout policy "syz1" [ 610.941112][T12838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.122507][T12838] veth0_vlan: entered promiscuous mode [ 611.147421][T12838] veth1_vlan: entered promiscuous mode [ 611.247086][T12838] veth0_macvtap: entered promiscuous mode [ 611.265434][T12838] veth1_macvtap: entered promiscuous mode [ 611.307376][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.346605][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.379675][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.425489][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.449911][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.470676][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.502438][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.529832][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.561763][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.579810][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.600930][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.630452][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.654402][T12838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.692842][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.717973][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.739831][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.768740][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.807239][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.852451][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.879964][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.909932][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.930791][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.971884][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.019795][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.071382][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.163655][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 612.163693][ T29] audit: type=1326 audit(2000000177.000:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 612.405553][T12838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.743816][T12838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.769212][ T29] audit: type=1326 audit(2000000177.000:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 612.807332][T12838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.849450][T12838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.895091][T12838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.920484][ T29] audit: type=1326 audit(2000000177.010:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 613.064622][ T29] audit: type=1326 audit(2000000177.010:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 613.139929][ T29] audit: type=1326 audit(2000000177.010:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 613.174311][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.181963][ T7037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.190282][ T7037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.194333][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.549447][T12997] Malformed UNC in devname [ 613.549447][T12997] [ 613.557569][T12997] CIFS: VFS: Malformed UNC in devname [ 613.715043][ T29] audit: type=1400 audit(2000000178.510:3643): avc: denied { lock } for pid=12991 comm="syz.7.1523" path="uts:[4026534428]" dev="nsfs" ino=4026534428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 614.446374][T13004] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1526'. [ 614.455508][T13004] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1526'. [ 614.467656][T13004] dummy0: entered promiscuous mode [ 614.473606][T13004] team0: entered promiscuous mode [ 614.478643][T13004] team_slave_0: entered promiscuous mode [ 614.484804][T13004] team_slave_1: entered promiscuous mode [ 614.654443][T13012] bridge_slave_1: left allmulticast mode [ 614.660646][T13012] bridge_slave_1: left promiscuous mode [ 614.674010][T13012] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.767790][ T6567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.940144][T12277] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 614.974688][ T6567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.034283][ T6567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.091417][T12277] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.102822][T12277] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.112676][ T6567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.112719][T12277] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 615.132182][T12277] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.141307][T12277] usb 9-1: config 0 descriptor?? [ 615.231057][ T6567] bridge_slave_1: left allmulticast mode [ 615.236782][ T6567] bridge_slave_1: left promiscuous mode [ 615.243176][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.252121][ T6567] bridge_slave_0: left allmulticast mode [ 615.258082][ T6567] bridge_slave_0: left promiscuous mode [ 615.264119][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.470145][ T5866] usb 50-1: device descriptor read/8, error -110 [ 615.576094][T12277] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 615.658524][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.669983][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.680731][ T6567] bond0 (unregistering): Released all slaves [ 615.759399][T11996] Bluetooth: hci6: unexpected event for opcode 0x203c [ 615.760041][T12277] isku 0003:1E7D:319C.000E: couldn't init struct isku_device [ 615.776735][T12277] isku 0003:1E7D:319C.000E: couldn't install keyboard [ 615.798738][T12277] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -71 [ 615.823784][T12277] usb 9-1: USB disconnect, device number 12 [ 615.860683][ T5866] usb usb50-port1: attempt power cycle [ 615.976124][ T6567] hsr_slave_0: left promiscuous mode [ 615.982567][ T6567] hsr_slave_1: left promiscuous mode [ 615.988364][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.000031][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.008330][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.016221][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.033264][ T6567] veth1_macvtap: left promiscuous mode [ 616.038787][ T6567] veth0_macvtap: left promiscuous mode [ 616.044386][ T6567] veth1_vlan: left promiscuous mode [ 616.049619][ T6567] veth0_vlan: left promiscuous mode [ 616.256230][T13024] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 616.267024][ T29] audit: type=1400 audit(2000000181.130:3644): avc: denied { ioctl } for pid=13023 comm="syz.6.1533" path="socket:[47467]" dev="sockfs" ino=47467 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 616.291844][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.334561][T13028] netlink: 'syz.6.1533': attribute type 1 has an invalid length. [ 616.438398][ T5866] usb usb50-port1: unable to enumerate USB device [ 616.600030][ T5871] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 616.801682][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 616.813118][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 616.813131][ T5871] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 616.835837][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 616.849393][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 616.858969][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.867289][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 616.878629][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 616.906564][ T5871] usb 8-1: Product: syz [ 616.950675][ T5871] usb 8-1: Manufacturer: syz [ 616.962912][ T5871] usb 8-1: SerialNumber: syz [ 616.988816][ T5871] usb 8-1: config 0 descriptor?? [ 617.034944][ T5871] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 617.904230][ T6567] team0 (unregistering): Port device team_slave_1 removed [ 618.302518][ T6567] team0 (unregistering): Port device team_slave_0 removed [ 618.916294][T11996] Bluetooth: hci4: command tx timeout [ 619.185740][ T29] audit: type=1326 audit(2000000183.970:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.209232][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.215954][ T29] audit: type=1326 audit(2000000183.970:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.239442][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.245914][ T29] audit: type=1326 audit(2000000183.970:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.270035][ T29] audit: type=1326 audit(2000000183.970:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.293524][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.300545][ T29] audit: type=1326 audit(2000000183.970:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.324008][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.331982][ T29] audit: type=1326 audit(2000000183.970:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.355643][ T29] audit: type=1326 audit(2000000183.980:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.379097][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.385496][ T29] audit: type=1326 audit(2000000183.980:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.409281][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.415614][ T29] audit: type=1326 audit(2000000183.980:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.439149][ T29] audit: type=1326 audit(2000000183.980:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 619.462590][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.556649][ T5899] usb 8-1: USB disconnect, device number 23 [ 620.193770][T13030] bond1 (unregistering): Released all slaves [ 620.257302][T13052] veth1_macvtap: left promiscuous mode [ 620.263927][T13052] macsec0: entered promiscuous mode [ 620.422916][T13036] lo speed is unknown, defaulting to 1000 [ 620.831476][T11996] Bluetooth: hci5: command 0x0406 tx timeout [ 620.990209][ T5827] Bluetooth: hci4: command tx timeout [ 621.219769][T13036] chnl_net:caif_netlink_parms(): no params data found [ 621.790957][T13036] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.798044][T13036] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.805270][T13036] bridge_slave_0: entered allmulticast mode [ 621.812438][T13036] bridge_slave_0: entered promiscuous mode [ 621.820612][T13036] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.827722][T13036] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.834977][T13036] bridge_slave_1: entered allmulticast mode [ 621.842164][T13036] bridge_slave_1: entered promiscuous mode [ 622.188269][T13036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.265352][T13036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.433227][T13036] team0: Port device team_slave_0 added [ 622.458874][T13036] team0: Port device team_slave_1 added [ 623.089284][ T5827] Bluetooth: hci4: command tx timeout [ 623.104721][T13036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.111838][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.177729][T13036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.352346][T13036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.367104][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.402855][T13106] netlink: 'syz.6.1553': attribute type 1 has an invalid length. [ 623.409924][T13036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.621918][T13036] hsr_slave_0: entered promiscuous mode [ 623.640772][T13036] hsr_slave_1: entered promiscuous mode [ 623.650201][T13036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.658107][T13036] Cannot create hsr debugfs directory [ 623.850025][ T5899] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 624.080345][ T5899] usb 8-1: Using ep0 maxpacket: 32 [ 624.101454][ T5899] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 624.178590][ T5899] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.198653][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.209061][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.239244][ T5899] usb 8-1: config 0 has no interface number 0 [ 624.256057][ T5899] usb 8-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 624.281317][ T5899] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 624.298439][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 624.308779][ T5899] usb 8-1: Product: syz [ 624.339861][ T5899] usb 8-1: SerialNumber: syz [ 624.486397][ T5899] usb 8-1: config 0 descriptor?? [ 624.641092][ T5899] hub 8-1:0.89: bad descriptor, ignoring hub [ 624.649849][ T5899] hub 8-1:0.89: probe with driver hub failed with error -5 [ 624.749078][ T5899] option 8-1:0.89: GSM modem (1-port) converter detected [ 625.160770][ T5827] Bluetooth: hci4: command tx timeout [ 625.562051][T13036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 625.602539][T13036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 625.632921][T13036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 625.640066][ T2145] usb 8-1: USB disconnect, device number 24 [ 625.651334][ T2145] option 8-1:0.89: device disconnected [ 625.671963][T13036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 626.162727][T13036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.432706][T13036] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.786168][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.793350][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.804235][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.811386][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.860861][T13036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 626.871724][T13036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.160772][ T5866] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 627.429863][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 627.438337][ T5866] usb 8-1: config index 0 descriptor too short (expected 62738, got 18) [ 627.458760][ T5866] usb 8-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 627.476761][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.493318][ T5866] usb 8-1: Product: syz [ 627.497714][ T5866] usb 8-1: Manufacturer: syz [ 627.502533][ T5866] usb 8-1: SerialNumber: syz [ 627.516259][ T5866] usb 8-1: config 0 descriptor?? [ 627.533719][ T5866] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 627.576304][T13036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.653271][T13036] veth0_vlan: entered promiscuous mode [ 627.673358][T13036] veth1_vlan: entered promiscuous mode [ 627.719869][ T5871] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 627.740753][T13036] veth0_macvtap: entered promiscuous mode [ 627.752856][T13036] veth1_macvtap: entered promiscuous mode [ 627.768144][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.779025][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.810270][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.831479][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.843662][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.854671][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.867126][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.874030][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 627.878511][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.893380][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.896756][ T5871] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 627.904086][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.919346][ T5871] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 627.923220][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.938584][ T5871] usb 7-1: Product: syz [ 627.943674][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.955856][ T5871] usb 7-1: Manufacturer: syz [ 627.955881][ T5871] usb 7-1: SerialNumber: syz [ 627.966822][ T5871] usb 7-1: config 0 descriptor?? [ 627.985743][ T5866] gspca_sunplus: reg_w_riv err -71 [ 627.991641][ T5866] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 628.015940][T13036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.016940][ T5871] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 628.042419][ T5866] usb 8-1: USB disconnect, device number 25 [ 628.047668][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.088600][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.104294][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.115693][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.126415][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.137027][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.147388][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.158277][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.168241][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.183435][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.194707][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.205530][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.220733][T13036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.239395][T13036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.250418][T13036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.259211][T13036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.269024][T13036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.365267][ T7037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.382693][ T7037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.406173][ T5871] gspca_zc3xx: reg_r err -71 [ 628.411139][ T5871] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 628.429300][ T5871] usb 7-1: USB disconnect, device number 26 [ 628.435472][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.456333][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.510055][ T5899] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 629.518119][ T2145] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 629.930312][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.049925][ T5899] usb 9-1: Using ep0 maxpacket: 32 [ 630.057040][ T5899] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 630.065233][ T5899] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.075353][ T2145] usb 8-1: Using ep0 maxpacket: 32 [ 630.080540][ T5899] usb 9-1: config 0 has no interface number 0 [ 630.086622][ T5899] usb 9-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 630.102836][ T5899] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 630.112711][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 630.121023][ T5899] usb 9-1: Product: syz [ 630.127173][ T5899] usb 9-1: SerialNumber: syz [ 630.136621][ T2145] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 630.144836][ T2145] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.155640][ T5899] usb 9-1: config 0 descriptor?? [ 630.160653][ T2145] usb 8-1: config 0 has no interface number 0 [ 630.166737][ T2145] usb 8-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 630.182499][ T5899] hub 9-1:0.89: bad descriptor, ignoring hub [ 630.188492][ T5899] hub 9-1:0.89: probe with driver hub failed with error -5 [ 630.196783][ T2145] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 630.206213][ T2145] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 630.214909][ T5899] option 9-1:0.89: GSM modem (1-port) converter detected [ 630.222008][ T2145] usb 8-1: Product: syz [ 630.226149][ T2145] usb 8-1: SerialNumber: syz [ 630.236779][ T2145] usb 8-1: config 0 descriptor?? [ 630.243917][ T2145] hub 8-1:0.89: bad descriptor, ignoring hub [ 630.250924][ T2145] hub 8-1:0.89: probe with driver hub failed with error -5 [ 630.258742][ T2145] option 8-1:0.89: GSM modem (1-port) converter detected [ 630.776138][T13192] syz.8.1572 (13192): drop_caches: 2 [ 631.078219][T13192] syz.8.1572 (13192): drop_caches: 2 [ 631.102744][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.270810][ T5866] usb 9-1: USB disconnect, device number 13 [ 631.276849][ T5871] usb 8-1: USB disconnect, device number 26 [ 631.283415][ T5866] option 9-1:0.89: device disconnected [ 631.289523][ T5871] option 8-1:0.89: device disconnected [ 631.306388][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.387677][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.470376][ T56] bridge_slave_1: left allmulticast mode [ 631.476108][ T56] bridge_slave_1: left promiscuous mode [ 631.482889][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.491477][ T56] bridge_slave_0: left allmulticast mode [ 631.497108][ T56] bridge_slave_0: left promiscuous mode [ 631.502956][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.959865][ T5899] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 632.160502][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 632.160521][ T29] audit: type=1400 audit(2000000197.010:3681): avc: denied { write } for pid=13203 comm="syz.7.1577" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 632.191313][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 632.203413][ T5899] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 632.211608][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.222763][ T5899] usb 6-1: config 0 has no interface number 0 [ 632.228889][ T5899] usb 6-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 632.271280][T11996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.282840][T11996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.292215][T11996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.302235][T11996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.311776][T11996] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 632.319611][T11996] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.374419][ T5899] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 632.389144][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 632.397362][ T5899] usb 6-1: Product: syz [ 632.401600][ T5899] usb 6-1: SerialNumber: syz [ 632.478808][ T29] audit: type=1400 audit(2000000197.330:3682): avc: denied { connect } for pid=13203 comm="syz.7.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 632.651677][ T5899] usb 6-1: config 0 descriptor?? [ 632.742608][ T5899] hub 6-1:0.89: bad descriptor, ignoring hub [ 632.797877][ T29] audit: type=1400 audit(2000000197.460:3683): avc: denied { remount } for pid=13212 comm="syz.8.1579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 632.832783][ T5899] hub 6-1:0.89: probe with driver hub failed with error -5 [ 632.848892][ T5899] option 6-1:0.89: GSM modem (1-port) converter detected [ 632.874804][ T29] audit: type=1400 audit(2000000197.730:3684): avc: denied { create } for pid=13217 comm="syz.6.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 632.921045][ T29] audit: type=1400 audit(2000000197.730:3685): avc: denied { write } for pid=13217 comm="syz.6.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 633.521893][T13223] syz.5.1574 (13223): drop_caches: 2 [ 633.561072][T13223] syz.5.1574 (13223): drop_caches: 2 [ 633.928538][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.943849][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.961544][ T56] bond0 (unregistering): Released all slaves [ 634.020624][T13206] lo speed is unknown, defaulting to 1000 [ 634.440158][T11996] Bluetooth: hci4: command tx timeout [ 634.472805][T13233] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1582'. [ 635.041388][T13235] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 635.090290][ T5866] usb 6-1: USB disconnect, device number 40 [ 635.095832][T13235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.134619][ T5866] option 6-1:0.89: device disconnected [ 635.260090][ T29] audit: type=1400 audit(2000000200.100:3686): avc: denied { write } for pid=13230 comm="syz.8.1582" name="file0" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 635.463921][ T29] audit: type=1400 audit(2000000200.100:3687): avc: denied { open } for pid=13230 comm="syz.8.1582" path="/60/file0" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 635.835052][ T29] audit: type=1400 audit(2000000200.100:3688): avc: denied { ioctl } for pid=13230 comm="syz.8.1582" path="/60/file0" dev="tmpfs" ino=339 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 636.259569][ T56] hsr_slave_0: left promiscuous mode [ 636.278113][ T56] hsr_slave_1: left promiscuous mode [ 636.306982][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.337927][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.445536][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.446270][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.511171][T11996] Bluetooth: hci4: command tx timeout [ 636.567115][ T56] veth1_macvtap: left promiscuous mode [ 636.567170][ T56] veth0_macvtap: left promiscuous mode [ 636.567270][ T56] veth1_vlan: left promiscuous mode [ 636.567336][ T56] veth0_vlan: left promiscuous mode [ 636.670487][ T29] audit: type=1400 audit(2000000201.520:3689): avc: denied { getopt } for pid=13244 comm="syz.6.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 636.872827][ T29] audit: type=1400 audit(2000000201.730:3690): avc: denied { bind } for pid=13244 comm="syz.6.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.099265][T13250] netlink: 'syz.6.1586': attribute type 4 has an invalid length. [ 637.792083][T13258] Falling back ldisc for ttyS3. [ 638.139061][ T56] team0 (unregistering): Port device team_slave_1 removed [ 638.189906][ T56] team0 (unregistering): Port device team_slave_0 removed [ 638.320320][ T2145] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 638.490638][ T2145] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.509142][ T2145] usb 8-1: config 0 has no interfaces? [ 638.516902][ T2145] usb 8-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 638.526225][ T2145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.543189][ T2145] usb 8-1: config 0 descriptor?? [ 638.600023][ T5827] Bluetooth: hci4: command tx timeout [ 638.605755][T11996] Bluetooth: hci5: command 0x0406 tx timeout [ 639.400793][T13206] chnl_net:caif_netlink_parms(): no params data found [ 639.560539][T13206] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.588527][T13206] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.605830][T13206] bridge_slave_0: entered allmulticast mode [ 639.624142][T13206] bridge_slave_0: entered promiscuous mode [ 639.654874][T13206] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.673234][T13206] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.687680][T13206] bridge_slave_1: entered allmulticast mode [ 639.694687][T13206] bridge_slave_1: entered promiscuous mode [ 639.700233][ T5866] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 639.764907][T13206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.787838][T13206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.843070][T13206] team0: Port device team_slave_0 added [ 639.858975][T13206] team0: Port device team_slave_1 added [ 639.865448][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 639.882391][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 639.882634][T13206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.896559][ T5866] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 639.898518][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.921759][ T5866] usb 6-1: Product: syz [ 639.932710][T13206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.950583][T13206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.955933][ T5866] usb 6-1: Manufacturer: syz [ 639.957686][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.989147][T13206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.998502][ T5866] usb 6-1: SerialNumber: syz [ 640.009954][ T5871] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 640.029246][ T5866] usb 6-1: config 0 descriptor?? [ 640.030718][T13206] hsr_slave_0: entered promiscuous mode [ 640.041607][T13206] hsr_slave_1: entered promiscuous mode [ 640.046029][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 640.054491][T13206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.069691][T13206] Cannot create hsr debugfs directory [ 640.171392][ T5871] usb 7-1: config index 0 descriptor too short (expected 106, got 36) [ 640.183653][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.226183][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.255671][ T5871] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 640.275292][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.293221][ T5871] usb 7-1: config 0 descriptor?? [ 640.595377][T13206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 640.627655][T13206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 640.655446][T13206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 640.679931][T11996] Bluetooth: hci4: command tx timeout [ 640.686367][T13206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 640.715333][ T5871] corsair 0003:1B1C:1B3E.000F: unknown main item tag 0x0 [ 640.730153][ T5871] corsair 0003:1B1C:1B3E.000F: unknown main item tag 0x0 [ 640.760013][ T5866] gspca_zc3xx: reg_r err -110 [ 640.767647][ T5871] corsair 0003:1B1C:1B3E.000F: unknown main item tag 0x0 [ 640.776872][ T5866] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 640.793743][ T5871] corsair 0003:1B1C:1B3E.000F: unknown main item tag 0x0 [ 640.824211][ T5871] corsair 0003:1B1C:1B3E.000F: unknown main item tag 0x0 [ 640.855622][ T5871] corsair 0003:1B1C:1B3E.000F: failed to start in urb: -90 [ 640.879107][ T5871] corsair 0003:1B1C:1B3E.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.6-1/input0 [ 641.054493][ T29] audit: type=1400 audit(2000000205.910:3691): avc: denied { write } for pid=13287 comm="syz.6.1596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 641.122464][ T5819] usb 8-1: USB disconnect, device number 27 [ 641.178815][T13206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.226218][T13206] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.251874][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.258978][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.290326][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.297429][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.421911][T13206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.499935][ T5819] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 641.629695][T13206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.660017][ T5819] usb 8-1: Using ep0 maxpacket: 32 [ 641.667042][ T5819] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 641.682169][ T5819] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.688543][T13206] veth0_vlan: entered promiscuous mode [ 641.705495][T13206] veth1_vlan: entered promiscuous mode [ 641.711865][ T5819] usb 8-1: config 0 has no interface number 0 [ 641.720578][ T5819] usb 8-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 641.735935][ T5819] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 641.745416][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 641.753573][ T5819] usb 8-1: Product: syz [ 641.757955][ T5819] usb 8-1: SerialNumber: syz [ 641.775688][ T5819] usb 8-1: config 0 descriptor?? [ 641.805596][ T5819] hub 8-1:0.89: bad descriptor, ignoring hub [ 641.819169][ T5819] hub 8-1:0.89: probe with driver hub failed with error -5 [ 641.827627][T13206] veth0_macvtap: entered promiscuous mode [ 641.840972][T13206] veth1_macvtap: entered promiscuous mode [ 641.852328][ T5819] option 8-1:0.89: GSM modem (1-port) converter detected [ 641.890614][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.915604][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.928108][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.943721][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.955315][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.969043][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.985051][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.997558][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.012658][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.025045][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.039441][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.053510][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.225376][T13312] syz.7.1599 (13312): drop_caches: 2 [ 642.265794][T13312] syz.7.1599 (13312): drop_caches: 2 [ 642.400082][T13206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.436567][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.476600][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.510710][ T2145] usb 6-1: USB disconnect, device number 41 [ 642.549928][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.570544][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.586527][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.599122][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.685696][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.708557][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.845058][ T5895] usb 7-1: USB disconnect, device number 27 [ 643.251051][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.262328][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.272677][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.284393][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.388389][T13316] Falling back ldisc for ttyS3. [ 643.636490][T13206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.770945][T13206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.781212][T13206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.793159][T13206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.804195][T13206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.881575][ T6567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.889405][ T6567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.910421][ T5819] usb 8-1: USB disconnect, device number 28 [ 643.917359][ T5819] option 8-1:0.89: device disconnected [ 643.944211][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.967683][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.979929][ T5895] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 644.148225][ T5895] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 644.197558][ T5895] usb 6-1: config 1 interface 0 has no altsetting 1 [ 644.208703][ T5895] usb 6-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 644.218583][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.226657][ T5895] usb 6-1: Product: syz [ 644.231581][ T5895] usb 6-1: Manufacturer: syz [ 644.236339][ T5895] usb 6-1: SerialNumber: syz [ 644.440337][ T2145] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 644.454994][ T5871] usb 6-1: USB disconnect, device number 42 [ 644.601201][ T2145] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.611615][ T2145] usb 7-1: config 0 has no interfaces? [ 644.617134][ T2145] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 644.626406][ T2145] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.636209][ T2145] usb 7-1: config 0 descriptor?? [ 644.679914][ T5895] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 644.830186][ T5895] usb 8-1: Using ep0 maxpacket: 8 [ 644.840713][ T5895] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 644.854187][ T5895] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 644.863922][ T5895] usb 8-1: Product: syz [ 644.868189][ T5895] usb 8-1: Manufacturer: syz [ 644.873589][ T5895] usb 8-1: SerialNumber: syz [ 644.880150][ T5895] usb 8-1: config 0 descriptor?? [ 644.887704][ T5895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 645.664773][ T5895] gspca_zc3xx: reg_w_i err -110 [ 645.700791][ T5895] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 645.901648][ T5819] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 646.149866][ T5819] usb 9-1: Using ep0 maxpacket: 32 [ 646.157362][ T5819] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 646.165649][ T5819] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.175947][ T5819] usb 9-1: config 0 has no interface number 0 [ 646.182653][ T5819] usb 9-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.197881][ T5819] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 646.207002][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 646.215419][ T5819] usb 9-1: Product: syz [ 646.219566][ T5819] usb 9-1: SerialNumber: syz [ 646.225239][ T5819] usb 9-1: config 0 descriptor?? [ 646.231734][ T5819] hub 9-1:0.89: bad descriptor, ignoring hub [ 646.237730][ T5819] hub 9-1:0.89: probe with driver hub failed with error -5 [ 646.246280][ T5819] option 9-1:0.89: GSM modem (1-port) converter detected [ 646.309861][ T5871] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 646.424245][ T6939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.460858][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 646.482346][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12408, setting to 64 [ 646.497290][ T5871] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 646.508562][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.794628][ T5871] usb 6-1: Product: syz [ 646.799786][ T5871] usb 6-1: Manufacturer: syz [ 646.824353][ T5871] usb 6-1: SerialNumber: syz [ 646.871091][T13349] syz.8.1611 (13349): drop_caches: 2 [ 646.883970][T13349] syz.8.1611 (13349): drop_caches: 2 [ 646.897767][ T5871] usb 6-1: config 0 descriptor?? [ 647.106551][ T5866] usb 9-1: USB disconnect, device number 14 [ 647.137987][ T5871] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 647.148865][ T5871] usb 6-1: USB disconnect, device number 43 [ 647.159502][ T5866] option 9-1:0.89: device disconnected [ 647.247551][ T2145] usb 7-1: USB disconnect, device number 28 [ 647.275353][ T6939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.349486][ T6939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.436144][ T6939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.559468][ T6939] bridge_slave_1: left allmulticast mode [ 647.584195][ T6939] bridge_slave_1: left promiscuous mode [ 647.596053][ T5819] usb 8-1: USB disconnect, device number 29 [ 647.604754][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.615709][ T6939] bridge_slave_0: left allmulticast mode [ 647.622569][ T6939] bridge_slave_0: left promiscuous mode [ 647.628251][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.967205][ T6939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.977875][ T6939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.988320][ T6939] bond0 (unregistering): Released all slaves [ 648.183615][ T6939] hsr_slave_0: left promiscuous mode [ 648.189307][ T6939] hsr_slave_1: left promiscuous mode [ 648.198268][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.205768][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.215551][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.223129][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.239681][ T6939] veth1_macvtap: left promiscuous mode [ 648.245566][ T6939] veth0_macvtap: left promiscuous mode [ 648.252046][ T6939] veth1_vlan: left promiscuous mode [ 648.257323][ T6939] veth0_vlan: left promiscuous mode [ 648.591739][ T29] audit: type=1400 audit(2000000213.440:3692): avc: denied { write } for pid=13353 comm="syz.6.1616" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 648.595180][T13359] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1617'. [ 649.414568][T13360] Falling back ldisc for ttyS3. [ 649.457852][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 649.483167][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 649.503190][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 649.522675][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 649.591085][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 649.602518][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 649.912630][ T6939] team0 (unregistering): Port device team_slave_1 removed [ 650.033277][ T6939] team0 (unregistering): Port device team_slave_0 removed [ 650.215690][T13383] No such timeout policy "syz1" [ 650.599947][ T5871] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 650.749941][ T5871] usb 9-1: Using ep0 maxpacket: 32 [ 650.756818][ T5871] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 650.773218][ T5871] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.786936][ T5871] usb 9-1: config 0 has no interface number 0 [ 650.796913][ T5871] usb 9-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.818978][ T5871] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 650.828344][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 650.846239][ T5871] usb 9-1: Product: syz [ 650.873387][ T5871] usb 9-1: SerialNumber: syz [ 650.879661][ T5871] usb 9-1: config 0 descriptor?? [ 650.886183][ T5871] hub 9-1:0.89: bad descriptor, ignoring hub [ 650.892400][ T5871] hub 9-1:0.89: probe with driver hub failed with error -5 [ 650.900676][ T5871] option 9-1:0.89: GSM modem (1-port) converter detected [ 651.001388][T13389] ERROR: device name not specified. [ 651.305672][ T29] audit: type=1400 audit(2000000215.850:3693): avc: denied { listen } for pid=13386 comm="syz.6.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 651.717020][T11996] Bluetooth: hci4: command tx timeout [ 651.769603][T13393] syz.8.1622 (13393): drop_caches: 2 [ 651.794800][T13393] syz.8.1622 (13393): drop_caches: 2 [ 652.204879][T13372] lo speed is unknown, defaulting to 1000 [ 652.858151][T13401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1625'. [ 652.890470][ T5899] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 652.957833][T13372] chnl_net:caif_netlink_parms(): no params data found [ 652.970224][ T5864] usb 9-1: USB disconnect, device number 15 [ 652.976882][ T5864] option 9-1:0.89: device disconnected [ 653.059229][T13372] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.066703][T13372] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.075029][ T5899] usb 8-1: Using ep0 maxpacket: 16 [ 653.080948][ T5899] usb 8-1: no configurations [ 653.085575][ T5899] usb 8-1: can't read configurations, error -22 [ 653.092245][T13372] bridge_slave_0: entered allmulticast mode [ 653.098716][T13372] bridge_slave_0: entered promiscuous mode [ 653.106674][T13372] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.113970][T13372] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.121363][T13372] bridge_slave_1: entered allmulticast mode [ 653.127894][T13372] bridge_slave_1: entered promiscuous mode [ 653.149101][T13372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.161390][T13372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.188373][T13372] team0: Port device team_slave_0 added [ 653.196166][T13372] team0: Port device team_slave_1 added [ 653.214698][T13372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.221781][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.248915][ T5899] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 653.257120][T13372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.268038][ T5864] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 653.278443][T13372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.285455][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.311879][T13372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.337172][T13372] hsr_slave_0: entered promiscuous mode [ 653.345236][T13372] hsr_slave_1: entered promiscuous mode [ 653.351595][T13372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.359196][T13372] Cannot create hsr debugfs directory [ 653.429944][ T5899] usb 8-1: Using ep0 maxpacket: 16 [ 653.436210][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.457293][ T5864] usb 6-1: config 0 has no interfaces? [ 653.463680][ T5899] usb 8-1: no configurations [ 653.476510][ T5899] usb 8-1: can't read configurations, error -22 [ 653.483335][ T5864] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 653.507096][ T5899] usb usb8-port1: attempt power cycle [ 653.526379][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.547750][ T5864] usb 6-1: config 0 descriptor?? [ 653.679981][ T5866] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 653.761856][T13372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 653.789927][T11996] Bluetooth: hci4: command tx timeout [ 653.841330][ T5866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 653.858990][ T5866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.869523][ T5866] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 653.900153][ T5866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.915898][ T5866] usb 9-1: config 0 descriptor?? [ 653.916585][T13372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 653.935214][T13372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 653.947026][T13372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 653.959984][ T5864] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 653.968135][ T5899] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 654.001177][ T5899] usb 8-1: Using ep0 maxpacket: 16 [ 654.008152][ T5899] usb 8-1: no configurations [ 654.013405][ T5899] usb 8-1: can't read configurations, error -22 [ 654.135914][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.205442][ T5899] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 654.255615][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.342500][ T5899] usb 8-1: Using ep0 maxpacket: 16 [ 654.403737][ T5864] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 654.420953][ T5899] usb 8-1: no configurations [ 654.470423][ T5899] usb 8-1: can't read configurations, error -22 [ 654.514735][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.519238][ T5866] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 654.523561][ T5899] usb usb8-port1: unable to enumerate USB device [ 654.542058][ T5864] usb 7-1: config 0 descriptor?? [ 654.583770][T13372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.598840][T13372] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.616951][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.624155][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.636272][ T2126] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.643416][ T2126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.796528][T13372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.828598][T13372] veth0_vlan: entered promiscuous mode [ 654.838873][T13372] veth1_vlan: entered promiscuous mode [ 654.862013][T13372] veth0_macvtap: entered promiscuous mode [ 654.870385][T13372] veth1_macvtap: entered promiscuous mode [ 654.883385][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.894080][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.906701][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.923315][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.939502][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.953818][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.955446][ T5899] usb 9-1: USB disconnect, device number 16 [ 654.963732][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.963754][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.963770][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.963783][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.963798][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.963810][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.964719][T13372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.984329][ T5864] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 654.995887][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.022003][ T5864] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 655.064416][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.067112][ T5864] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 655.074752][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.092326][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.104163][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.111625][ T5864] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 655.121001][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.137653][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.138966][ T5864] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 655.149284][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.165749][ T5864] samsung 0003:0419:0600.0011: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.6-1/input0 [ 655.183026][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.197348][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.216917][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.267426][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.299327][T13372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.327121][ T5866] usb 7-1: USB disconnect, device number 29 [ 655.339207][T13372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.348149][T13372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.358911][T13372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.367665][T13372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.671652][T13432] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 655.678215][T13432] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 655.686145][T13432] vhci_hcd vhci_hcd.0: Device attached [ 655.870763][T11996] Bluetooth: hci4: command tx timeout [ 655.970227][ T5864] usb 48-1: SetAddress Request (6) to port 0 [ 655.983535][ T2126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.991563][T13433] vhci_hcd: connection closed [ 655.992773][ T5864] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 655.994272][ T7037] vhci_hcd: stop threads [ 655.997510][ T6939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.007608][ T7037] vhci_hcd: release socket [ 656.010099][ T2126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.025382][ T7037] vhci_hcd: disconnect device [ 656.038316][ T6939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.098264][ T5899] usb 6-1: USB disconnect, device number 44 [ 656.269848][T13441] fuse: Invalid rootmode [ 656.813857][T13450] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1639'. [ 657.129594][T13457] FAULT_INJECTION: forcing a failure. [ 657.129594][T13457] name failslab, interval 1, probability 0, space 0, times 0 [ 657.143306][T13457] CPU: 0 UID: 0 PID: 13457 Comm: syz.8.1642 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 657.154116][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.164175][T13457] Call Trace: [ 657.167453][T13457] [ 657.170371][T13457] dump_stack_lvl+0x16c/0x1f0 [ 657.175063][T13457] should_fail_ex+0x497/0x5b0 [ 657.179763][T13457] ? fs_reclaim_acquire+0xae/0x150 [ 657.184879][T13457] should_failslab+0xc2/0x120 [ 657.189549][T13457] __kmalloc_cache_noprof+0x68/0x410 [ 657.194820][T13457] ? __asan_memset+0x23/0x50 [ 657.199402][T13457] __netlink_diag_dump+0x5b2/0x7a0 [ 657.204503][T13457] ? __mutex_trylock_common+0x90/0x250 [ 657.209955][T13457] netlink_diag_dump+0x1a0/0x240 [ 657.214881][T13457] netlink_dump+0x53c/0xd00 [ 657.219379][T13457] ? __pfx_netlink_dump+0x10/0x10 [ 657.224392][T13457] ? __netlink_dump_start+0x154/0x970 [ 657.229761][T13457] ? netlink_lookup+0x259/0x520 [ 657.234604][T13457] ? __pfx_netlink_lookup+0x10/0x10 [ 657.239802][T13457] __netlink_dump_start+0x6ca/0x970 [ 657.245005][T13457] netlink_diag_handler_dump+0x1b2/0x250 [ 657.250631][T13457] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 657.256775][T13457] ? __pfx_netlink_diag_dump+0x10/0x10 [ 657.262223][T13457] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 657.268121][T13457] sock_diag_rcv_msg+0x437/0x790 [ 657.273055][T13457] netlink_rcv_skb+0x16b/0x440 [ 657.277813][T13457] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 657.283263][T13457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.288552][T13457] ? netlink_deliver_tap+0x1ae/0xd30 [ 657.293846][T13457] netlink_unicast+0x53c/0x7f0 [ 657.298606][T13457] ? __pfx_netlink_unicast+0x10/0x10 [ 657.303890][T13457] netlink_sendmsg+0x8b8/0xd70 [ 657.308684][T13457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.313989][T13457] ____sys_sendmsg+0xaaf/0xc90 [ 657.318762][T13457] ? copy_msghdr_from_user+0x10b/0x160 [ 657.324225][T13457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.329513][T13457] ___sys_sendmsg+0x135/0x1e0 [ 657.334177][T13457] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.339384][T13457] ? __pfx_lock_release+0x10/0x10 [ 657.344399][T13457] ? trace_lock_acquire+0x14e/0x1f0 [ 657.349686][T13457] ? __fget_files+0x206/0x3a0 [ 657.354359][T13457] __sys_sendmsg+0x16e/0x220 [ 657.358937][T13457] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.364059][T13457] do_syscall_64+0xcd/0x250 [ 657.368560][T13457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.374444][T13457] RIP: 0033:0x7f6584b85d29 [ 657.378843][T13457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.398441][T13457] RSP: 002b:00007f65849f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.406847][T13457] RAX: ffffffffffffffda RBX: 00007f6584d75fa0 RCX: 00007f6584b85d29 [ 657.414805][T13457] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 657.422761][T13457] RBP: 00007f65849f9090 R08: 0000000000000000 R09: 0000000000000000 [ 657.430718][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.438674][T13457] R13: 0000000000000000 R14: 00007f6584d75fa0 R15: 00007ffc6cf64128 [ 657.446644][T13457] [ 657.638090][ T29] audit: type=1400 audit(2000000222.460:3694): avc: denied { name_bind } for pid=13454 comm="syz.6.1641" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 657.873894][T13466] sp0: Synchronizing with TNC [ 658.350243][ T5899] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 658.431884][ T5895] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 658.462143][ T2126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.521219][ T5899] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.531751][ T5899] usb 9-1: config 0 has no interfaces? [ 658.537248][ T5899] usb 9-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 658.589032][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.642602][ T5899] usb 9-1: config 0 descriptor?? [ 658.679819][ T5895] usb 7-1: Using ep0 maxpacket: 8 [ 658.696172][ T5895] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 658.719000][ T5895] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 658.768491][ T29] audit: type=1326 audit(2000000223.620:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 658.826722][ T5895] usb 7-1: Product: syz [ 658.904072][ T5895] usb 7-1: Manufacturer: syz [ 659.119403][ T5895] usb 7-1: SerialNumber: syz [ 659.637871][ T5895] usb 7-1: config 0 descriptor?? [ 659.638739][ T29] audit: type=1326 audit(2000000223.620:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 659.645126][ T5895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 660.449903][ T5895] gspca_zc3xx: reg_r err -110 [ 660.454732][ T5895] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 660.555413][ T5895] usb 7-1: USB disconnect, device number 30 [ 661.069974][ T5864] usb 48-1: device descriptor read/8, error -110 [ 661.102844][ T2126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.154729][ T5928] usb 9-1: USB disconnect, device number 17 [ 661.237283][ T2126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.326717][ T2126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.472962][ T5864] usb usb48-port1: attempt power cycle [ 662.669838][ T29] audit: type=1326 audit(2000000227.450:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13483 comm="syz.8.1652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x0 [ 662.921869][ T5864] usb usb48-port1: unable to enumerate USB device [ 662.974153][ T29] audit: type=1400 audit(2000000227.490:3698): avc: denied { mount } for pid=13488 comm="syz.5.1649" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 663.083630][ T2126] bridge_slave_1: left allmulticast mode [ 663.089340][ T2126] bridge_slave_1: left promiscuous mode [ 663.095350][ T29] audit: type=1400 audit(2000000227.870:3699): avc: denied { unmount } for pid=7964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 663.161866][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.172527][T13498] FAULT_INJECTION: forcing a failure. [ 663.172527][T13498] name failslab, interval 1, probability 0, space 0, times 0 [ 663.195118][T13498] CPU: 1 UID: 0 PID: 13498 Comm: syz.8.1654 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 663.199959][ T5866] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 663.205921][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 663.223542][T13498] Call Trace: [ 663.226829][T13498] [ 663.229766][T13498] dump_stack_lvl+0x16c/0x1f0 [ 663.234459][T13498] should_fail_ex+0x497/0x5b0 [ 663.239163][T13498] should_failslab+0xc2/0x120 [ 663.243866][T13498] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 663.249261][T13498] ? skb_clone+0x190/0x3f0 [ 663.253695][T13498] skb_clone+0x190/0x3f0 [ 663.257950][T13498] netlink_deliver_tap+0xabd/0xd30 [ 663.263085][T13498] netlink_dump+0xb60/0xd00 [ 663.267610][T13498] ? __pfx_netlink_dump+0x10/0x10 [ 663.272646][T13498] ? __netlink_dump_start+0x154/0x970 [ 663.278040][T13498] ? netlink_lookup+0x259/0x520 [ 663.282901][T13498] ? __pfx_netlink_lookup+0x10/0x10 [ 663.288116][T13498] __netlink_dump_start+0x6ca/0x970 [ 663.293354][T13498] netlink_diag_handler_dump+0x1b2/0x250 [ 663.298996][T13498] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 663.305163][T13498] ? __pfx_netlink_diag_dump+0x10/0x10 [ 663.310644][T13498] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 663.316570][T13498] sock_diag_rcv_msg+0x437/0x790 [ 663.321537][T13498] netlink_rcv_skb+0x16b/0x440 [ 663.326328][T13498] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 663.331812][T13498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.337132][T13498] ? netlink_deliver_tap+0x1ae/0xd30 [ 663.342436][T13498] netlink_unicast+0x53c/0x7f0 [ 663.347192][T13498] ? __pfx_netlink_unicast+0x10/0x10 [ 663.352502][T13498] netlink_sendmsg+0x8b8/0xd70 [ 663.357273][T13498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.362557][T13498] ____sys_sendmsg+0xaaf/0xc90 [ 663.367323][T13498] ? copy_msghdr_from_user+0x10b/0x160 [ 663.372799][T13498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.378106][T13498] ___sys_sendmsg+0x135/0x1e0 [ 663.382771][T13498] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.388013][T13498] ? __pfx_lock_release+0x10/0x10 [ 663.393051][T13498] ? trace_lock_acquire+0x14e/0x1f0 [ 663.398279][T13498] ? __fget_files+0x206/0x3a0 [ 663.402964][T13498] __sys_sendmsg+0x16e/0x220 [ 663.407554][T13498] ? __pfx___sys_sendmsg+0x10/0x10 [ 663.412674][T13498] do_syscall_64+0xcd/0x250 [ 663.417223][T13498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.423134][T13498] RIP: 0033:0x7f6584b85d29 [ 663.427551][T13498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.447159][T13498] RSP: 002b:00007f65849f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.455581][T13498] RAX: ffffffffffffffda RBX: 00007f6584d75fa0 RCX: 00007f6584b85d29 [ 663.463556][T13498] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 663.471517][T13498] RBP: 00007f65849f9090 R08: 0000000000000000 R09: 0000000000000000 [ 663.479508][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.487464][T13498] R13: 0000000000000000 R14: 00007f6584d75fa0 R15: 00007ffc6cf64128 [ 663.495426][T13498] [ 663.506076][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.521297][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.530698][ T2126] bridge_slave_0: left allmulticast mode [ 663.536364][ T2126] bridge_slave_0: left promiscuous mode [ 663.542225][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.576372][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.585271][ T29] audit: type=1326 audit(2000000228.440:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.8.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 663.611426][ T5866] usb 7-1: device descriptor read/64, error -71 [ 663.635869][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 663.635956][ T29] audit: type=1326 audit(2000000228.470:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.8.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 663.643841][ T29] audit: type=1326 audit(2000000228.470:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.8.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 663.698744][ T29] audit: type=1326 audit(2000000228.470:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.8.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7ffc0000 [ 663.698820][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 663.753914][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 663.809966][ T5864] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 663.860095][ T5866] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 663.999811][ T5866] usb 7-1: device descriptor read/64, error -71 [ 664.079810][ T5864] usb 8-1: Using ep0 maxpacket: 32 [ 664.091277][ T5864] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 664.099524][ T5864] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.110348][ T5864] usb 8-1: config 0 has no interface number 0 [ 664.116622][ T5864] usb 8-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 664.130760][ T5866] usb usb7-port1: attempt power cycle [ 664.131610][ T5864] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 664.178379][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 664.212665][ T5864] usb 8-1: Product: syz [ 664.217019][ T5864] usb 8-1: SerialNumber: syz [ 664.249846][ T5864] usb 8-1: config 0 descriptor?? [ 664.281474][ T5864] hub 8-1:0.89: bad descriptor, ignoring hub [ 664.287523][ T5864] hub 8-1:0.89: probe with driver hub failed with error -5 [ 664.341278][ T5864] option 8-1:0.89: GSM modem (1-port) converter detected [ 664.469988][ T5866] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 664.474001][ T29] audit: type=1326 audit(2000000229.330:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.8.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7fc00000 [ 664.511947][ T5866] usb 7-1: device descriptor read/8, error -71 [ 664.558101][ T29] audit: type=1326 audit(2000000229.330:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.8.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6584b85d29 code=0x7fc00000 [ 664.581833][ T29] audit: type=1326 audit(2000000229.330:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.8.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b85d29 code=0x7fc00000 [ 664.714793][ T5871] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 665.049886][ T5866] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 665.069974][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 665.101466][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 665.114184][ T5871] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 665.126414][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.139850][ T5866] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 665.147962][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.169855][ T5871] usb 6-1: config 0 has no interface number 0 [ 665.175998][ T5871] usb 6-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 665.199783][ T5866] usb 7-1: config 0 has no interface number 0 [ 665.205915][ T5866] usb 7-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 665.221843][ T5871] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 665.231327][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 665.239346][ T5871] usb 6-1: Product: syz [ 665.243769][ T5871] usb 6-1: SerialNumber: syz [ 665.249409][ T5866] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 665.258685][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 665.267855][ T5871] usb 6-1: config 0 descriptor?? [ 665.273082][ T5866] usb 7-1: Product: syz [ 665.277659][ T5866] usb 7-1: SerialNumber: syz [ 665.283012][ T5871] hub 6-1:0.89: bad descriptor, ignoring hub [ 665.289038][ T5871] hub 6-1:0.89: probe with driver hub failed with error -5 [ 665.297998][ T5866] usb 7-1: config 0 descriptor?? [ 665.311018][ T5866] hub 7-1:0.89: bad descriptor, ignoring hub [ 665.317925][ T5871] option 6-1:0.89: GSM modem (1-port) converter detected [ 665.325335][ T5866] hub 7-1:0.89: probe with driver hub failed with error -5 [ 665.341916][ T5866] option 7-1:0.89: GSM modem (1-port) converter detected [ 665.455198][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.473045][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.483331][ T2126] bond0 (unregistering): Released all slaves [ 665.542929][T13504] lo speed is unknown, defaulting to 1000 [ 665.666001][T12277] usb 8-1: USB disconnect, device number 34 [ 665.714113][T12277] option 8-1:0.89: device disconnected [ 665.874288][T13524] syz.5.1659 (13524): drop_caches: 2 [ 665.882501][ T5827] Bluetooth: hci4: command tx timeout [ 666.057283][T13524] syz.5.1659 (13524): drop_caches: 2 [ 666.304054][T13527] syz.6.1660 (13527): drop_caches: 2 [ 666.322219][T13527] syz.6.1660 (13527): drop_caches: 2 [ 666.562171][ T2126] hsr_slave_0: left promiscuous mode [ 666.577842][ T2126] hsr_slave_1: left promiscuous mode [ 666.584131][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.600024][ T2145] usb 6-1: USB disconnect, device number 45 [ 666.606184][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.614742][ T2145] option 6-1:0.89: device disconnected [ 666.630803][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.638295][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.670933][T11996] Bluetooth: hci5: command 0x0406 tx timeout [ 666.674775][ T2126] veth1_macvtap: left promiscuous mode [ 666.682610][ T2126] veth0_macvtap: left promiscuous mode [ 666.688107][ T2126] veth1_vlan: left promiscuous mode [ 666.690368][ T5864] usb 7-1: USB disconnect, device number 34 [ 666.693666][ T2126] veth0_vlan: left promiscuous mode [ 666.702835][ T5864] option 7-1:0.89: device disconnected [ 666.730107][T12277] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 666.887988][T12277] usb 8-1: Using ep0 maxpacket: 8 [ 666.896344][T12277] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 666.905599][T12277] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 666.932990][T12277] usb 8-1: Product: syz [ 666.937239][T12277] usb 8-1: Manufacturer: syz [ 666.941948][T12277] usb 8-1: SerialNumber: syz [ 666.963091][T12277] usb 8-1: config 0 descriptor?? [ 666.985243][T12277] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 667.188327][T13538] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1664'. [ 667.402102][T12277] gspca_zc3xx: reg_r err -71 [ 667.407038][T12277] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 667.421860][T12277] usb 8-1: USB disconnect, device number 35 [ 667.546154][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 667.602934][ T2126] team0 (unregistering): Port device team_slave_0 removed [ 667.950727][ T5827] Bluetooth: hci4: command tx timeout [ 668.425252][ T29] kauditd_printk_skb: 1808 callbacks suppressed [ 668.425269][ T29] audit: type=1326 audit(2000000233.280:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.7.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 668.477622][ T29] audit: type=1326 audit(2000000233.310:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.7.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 668.497192][T13553] FAULT_INJECTION: forcing a failure. [ 668.497192][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.507654][ T29] audit: type=1326 audit(2000000233.310:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.7.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 668.515612][T13553] CPU: 1 UID: 0 PID: 13553 Comm: syz.7.1669 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 668.548920][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 668.553716][ T29] audit: type=1326 audit(2000000233.310:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.7.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 668.558971][T13553] Call Trace: [ 668.558981][T13553] [ 668.558990][T13553] dump_stack_lvl+0x16c/0x1f0 [ 668.593246][T13553] should_fail_ex+0x497/0x5b0 [ 668.597925][T13553] _copy_to_user+0x32/0xd0 [ 668.602329][T13553] simple_read_from_buffer+0xd0/0x160 [ 668.607698][T13553] proc_fail_nth_read+0x198/0x270 [ 668.612719][T13553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.618260][T13553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.623800][T13553] vfs_read+0x1df/0xbe0 [ 668.627946][T13553] ? __fget_files+0x1fc/0x3a0 [ 668.632617][T13553] ? __pfx___mutex_lock+0x10/0x10 [ 668.637633][T13553] ? __pfx_vfs_read+0x10/0x10 [ 668.642306][T13553] ? __fget_files+0x206/0x3a0 [ 668.646984][T13553] ksys_read+0x12b/0x250 [ 668.651215][T13553] ? __pfx_ksys_read+0x10/0x10 [ 668.655977][T13553] do_syscall_64+0xcd/0x250 [ 668.660477][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.666362][T13553] RIP: 0033:0x7f3dd978473c [ 668.670764][T13553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 668.690359][T13553] RSP: 002b:00007f3dda53f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 668.698758][T13553] RAX: ffffffffffffffda RBX: 00007f3dd9975fa0 RCX: 00007f3dd978473c [ 668.706715][T13553] RDX: 000000000000000f RSI: 00007f3dda53f0a0 RDI: 0000000000000005 [ 668.714674][T13553] RBP: 00007f3dda53f090 R08: 0000000000000000 R09: 0000000000000000 [ 668.722629][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.730585][T13553] R13: 0000000000000000 R14: 00007f3dd9975fa0 R15: 00007ffe40d11748 [ 668.738551][T13553] [ 668.741624][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.741700][T12277] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 668.767465][ T29] audit: type=1326 audit(2000000233.310:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.7.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd9785d29 code=0x7ffc0000 [ 668.927628][T12277] usb 9-1: Using ep0 maxpacket: 8 [ 669.046244][T12277] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 669.060012][T12277] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 669.070519][T12277] usb 9-1: Product: syz [ 669.075928][T12277] usb 9-1: Manufacturer: syz [ 669.082661][T12277] usb 9-1: SerialNumber: syz [ 669.182353][T12277] usb 9-1: config 0 descriptor?? [ 669.205475][T12277] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 669.397078][T13504] chnl_net:caif_netlink_parms(): no params data found [ 669.600905][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.609922][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.617631][T13504] bridge_slave_0: entered allmulticast mode [ 669.636221][T13504] bridge_slave_0: entered promiscuous mode [ 669.645374][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.666635][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.729928][ T2145] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 670.243777][T12277] gspca_zc3xx: reg_r err -110 [ 670.248667][T12277] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 670.249306][ T5827] Bluetooth: hci4: command tx timeout [ 670.349121][T13504] bridge_slave_1: entered allmulticast mode [ 670.467081][T13504] bridge_slave_1: entered promiscuous mode [ 670.529973][ T2145] usb 8-1: Using ep0 maxpacket: 16 [ 670.540185][ T2145] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.579552][ T29] audit: type=1400 audit(2000000235.420:5520): avc: denied { create } for pid=13568 comm="syz.6.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 670.734943][ T2145] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.772936][T13572] syz.5.1674: attempt to access beyond end of device [ 670.772936][T13572] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 670.979839][ T2145] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 42449, setting to 1024 [ 670.991400][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.997030][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.000906][ T2145] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 671.020143][ T2145] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.034431][ T2145] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.042245][T13572] FAT-fs (loop5): unable to read boot sector [ 671.043700][ T29] audit: type=1400 audit(2000000235.900:5521): avc: denied { setopt } for pid=13571 comm="syz.5.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 671.069452][ T2145] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.077826][ T2145] usb 8-1: Manufacturer: syz [ 671.083936][ T2145] usb 8-1: config 0 descriptor?? [ 671.169601][T13504] team0: Port device team_slave_0 added [ 671.199523][T13504] team0: Port device team_slave_1 added [ 671.282023][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.312375][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.363272][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.396027][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.408863][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.472111][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.539461][T13504] hsr_slave_0: entered promiscuous mode [ 671.553538][T13504] hsr_slave_1: entered promiscuous mode [ 671.569602][T13504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.584877][T13504] Cannot create hsr debugfs directory [ 671.869849][ T5866] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 672.031608][ T5866] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 672.065150][ T5866] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.080712][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.101666][ T5866] usb 7-1: Product: syz [ 672.111307][ T5866] usb 7-1: Manufacturer: syz [ 672.123770][ T5866] usb 7-1: SerialNumber: syz [ 672.139686][T13582] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 672.248908][T13504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 672.277374][T13504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 672.284230][ T5827] Bluetooth: hci4: command tx timeout [ 672.307422][T13504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 672.336720][T13504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 672.447002][ T5866] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 672.477400][ T5866] usb 7-1: USB disconnect, device number 35 [ 672.483158][ T5864] usb 9-1: USB disconnect, device number 18 [ 672.536196][T13504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.574437][T13504] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.625520][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.632680][ T2123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.642292][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.649437][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.879253][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.937044][T13504] veth0_vlan: entered promiscuous mode [ 672.949278][T13504] veth1_vlan: entered promiscuous mode [ 672.960037][ T5864] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 672.968485][T13504] veth0_macvtap: entered promiscuous mode [ 672.974538][ T5866] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 672.988697][T13504] veth1_macvtap: entered promiscuous mode [ 673.001352][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.012171][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.022333][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.032961][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.043119][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.053972][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.064007][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.074573][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.084517][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.095042][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.104974][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.116072][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.127964][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.130567][ T5864] usb 9-1: Using ep0 maxpacket: 8 [ 673.137887][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.151165][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.161140][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.173407][ T5866] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 673.175838][ T5864] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 673.188622][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.208396][ T5864] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 673.212610][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.227439][ T5864] usb 9-1: Product: syz [ 673.232212][ T5864] usb 9-1: Manufacturer: syz [ 673.237085][ T5864] usb 9-1: SerialNumber: syz [ 673.243853][ T5866] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.254217][ T5864] usb 9-1: config 0 descriptor?? [ 673.257780][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.269289][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.271550][ T5864] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 673.290042][ T5866] usb 7-1: Product: syz [ 673.294328][ T5866] usb 7-1: Manufacturer: syz [ 673.299013][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.310321][ T5866] usb 7-1: SerialNumber: syz [ 673.315740][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.329508][T13578] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 673.338408][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.358576][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.369466][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.380139][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.394806][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.413354][T13504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.423042][T13504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.432752][T13504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.441642][T13504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.457899][ T29] audit: type=1326 audit(2000000238.310:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 673.496072][ T29] audit: type=1326 audit(2000000238.310:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 673.522225][ T29] audit: type=1326 audit(2000000238.310:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 673.621557][ T29] audit: type=1326 audit(2000000238.310:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 673.656986][ T6939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.666437][ T6939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.677437][ T29] audit: type=1326 audit(2000000238.310:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1763385d29 code=0x7ffc0000 [ 673.696806][ T6939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.720673][ T6939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.012278][ T5864] gspca_zc3xx: reg_r err -110 [ 674.017492][ T5864] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 674.091433][ T5864] usb 9-1: USB disconnect, device number 19 [ 674.278975][T13603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1681'. [ 674.579895][ T5822] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 674.690774][ T5866] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 674.710211][ T5866] usb 7-1: USB disconnect, device number 36 [ 674.742465][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 674.775569][ T5822] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 674.796338][ T2145] rc_core: IR keymap rc-hauppauge not found [ 674.811603][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.830789][ T2145] Registered IR keymap rc-empty [ 674.838106][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 674.845690][ T5822] usb 6-1: config 0 has no interface number 0 [ 674.852428][ T5822] usb 6-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 674.877837][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 674.894455][ T5822] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 674.919261][ T2145] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 674.931908][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 674.946340][ T5822] usb 6-1: Product: syz [ 674.955422][ T2145] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input31 [ 674.967765][ T5822] usb 6-1: SerialNumber: syz [ 674.983982][ T5822] usb 6-1: config 0 descriptor?? [ 675.004431][ T5822] hub 6-1:0.89: bad descriptor, ignoring hub [ 675.012190][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.019054][ T5822] hub 6-1:0.89: probe with driver hub failed with error -5 [ 675.032945][ T5822] option 6-1:0.89: GSM modem (1-port) converter detected [ 675.041268][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.071919][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.090819][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.110757][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.140720][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.163375][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.195784][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.220345][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.255237][ T2145] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 675.351730][ T2145] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 675.364568][ T2145] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 675.378348][ T2145] usb 8-1: USB disconnect, device number 36 [ 676.172361][ T29] audit: type=1400 audit(2000000240.480:5527): avc: denied { name_bind } for pid=13615 comm="syz.6.1686" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 676.444150][T13621] syz.5.1682 (13621): drop_caches: 2 [ 676.467659][T13621] syz.5.1682 (13621): drop_caches: 2 [ 676.772819][ T5864] usb 6-1: USB disconnect, device number 46 [ 676.779381][ T5864] option 6-1:0.89: device disconnected [ 676.810622][ T5819] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 676.830012][ T5822] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 676.837660][ T2145] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 676.917895][ T7040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.976829][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 676.983784][ T5819] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 676.999925][ T5822] usb 9-1: Using ep0 maxpacket: 32 [ 677.005446][ T2145] usb 8-1: Using ep0 maxpacket: 8 [ 677.010864][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.023934][ T5819] usb 7-1: config 0 has no interface number 0 [ 677.031242][ T5822] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 677.039604][ T5822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.050255][ T5819] usb 7-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 677.063567][ T5822] usb 9-1: config 0 has no interface number 0 [ 677.070467][ T5822] usb 9-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 677.084979][ T5819] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 677.094266][ T2145] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 677.103851][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 677.112252][ T2145] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 677.120611][ T5819] usb 7-1: Product: syz [ 677.124879][ T2145] usb 8-1: Product: syz [ 677.129037][ T2145] usb 8-1: Manufacturer: syz [ 677.133673][ T5819] usb 7-1: SerialNumber: syz [ 677.139011][ T2145] usb 8-1: SerialNumber: syz [ 677.144975][ T5819] usb 7-1: config 0 descriptor?? [ 677.150416][ T5822] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 677.159539][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 677.168356][ T2145] usb 8-1: config 0 descriptor?? [ 677.173975][ T5822] usb 9-1: Product: syz [ 677.178220][ T5822] usb 9-1: SerialNumber: syz [ 677.184181][ T5819] hub 7-1:0.89: bad descriptor, ignoring hub [ 677.190377][ T5819] hub 7-1:0.89: probe with driver hub failed with error -5 [ 677.202852][ T5819] option 7-1:0.89: GSM modem (1-port) converter detected [ 677.213036][ T2145] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 677.220853][ T5822] usb 9-1: config 0 descriptor?? [ 677.226751][ T5822] hub 9-1:0.89: bad descriptor, ignoring hub [ 677.234120][ T5822] hub 9-1:0.89: probe with driver hub failed with error -5 [ 677.244018][ T5822] option 9-1:0.89: GSM modem (1-port) converter detected [ 677.786977][T13631] syz.6.1688 (13631): drop_caches: 2 [ 677.806948][T13631] syz.6.1688 (13631): drop_caches: 2 [ 678.050107][ T2145] gspca_zc3xx: reg_r err -110 [ 678.070147][ T2145] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 678.291144][ T7040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.363272][ T7040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.391029][ T5928] usb 7-1: USB disconnect, device number 37 [ 678.397501][ T5928] option 7-1:0.89: device disconnected [ 678.430689][ T7040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.444864][ T2145] usb 9-1: USB disconnect, device number 20 [ 678.452214][ T2145] option 9-1:0.89: device disconnected [ 678.573098][ T7040] bridge_slave_1: left allmulticast mode [ 678.578878][ T7040] bridge_slave_1: left promiscuous mode [ 678.584924][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.594992][ T7040] bridge_slave_0: left allmulticast mode [ 678.601521][ T7040] bridge_slave_0: left promiscuous mode [ 678.607660][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.359508][T11996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 679.406333][T11996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 679.433703][T11996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 679.444760][T11996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 679.454785][T13646] fuse: Unknown parameter ' ' [ 679.465636][T11996] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 679.473743][T11996] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 679.582683][ T2145] usb 8-1: USB disconnect, device number 37 [ 679.719859][ T5866] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 679.867092][ T7040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.878320][ T5866] usb 7-1: Using ep0 maxpacket: 16 [ 679.890111][ T7040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.899206][ T5866] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.910701][ T5866] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.921219][ T7040] bond0 (unregistering): Released all slaves [ 679.934865][ T5866] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 679.964254][T13641] lo speed is unknown, defaulting to 1000 [ 679.970256][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.978495][ T5866] usb 7-1: Product: 贀涢ᷦꢓ쮧ᇻ啰얂㗵酜঩곀લ궍懻 [ 680.009758][ T5866] usb 7-1: Manufacturer: 㰫 [ 680.014404][ T5866] usb 7-1: SerialNumber: ⣱⿻潹呗價䗄䕅⫌퍆䙿讒밁⑋௠⾶༔✇ǎ״럄靭鏢킨䙴굡礤븹㤷⣷툶챠菊斍갿ས쑔俗磌흡軐쵻ե蟟閂䰇᳦࿬彀⯔삊걶꒯ഗ㯍ᶲ㓈⃎荆믴ᆈ쒽暑鼄镳㊭鉩韚ꖎᆘ㴓꾟鍮眱㰅榸⼤䕺폼怤䒲勇쪫鍿 [ 680.100142][ T5895] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 680.271282][ T5866] usb 7-1: 0:2 : does not exist [ 680.291744][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 680.303054][ T5866] usb 7-1: USB disconnect, device number 38 [ 680.312921][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.343086][ T5895] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 680.370034][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.411499][ T5895] usb 8-1: config 0 descriptor?? [ 680.440595][T13641] chnl_net:caif_netlink_parms(): no params data found [ 680.544562][ T7040] hsr_slave_0: left promiscuous mode [ 680.553216][ T7040] hsr_slave_1: left promiscuous mode [ 680.567198][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.574883][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.587482][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.595823][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.623404][ T7040] veth1_macvtap: left promiscuous mode [ 680.629205][ T7040] veth0_macvtap: left promiscuous mode [ 680.634862][ T7040] veth1_vlan: left promiscuous mode [ 680.640370][ T7040] veth0_vlan: left promiscuous mode [ 680.831610][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 680.840892][ T5895] usbhid 8-1:0.0: can't add hid device: -71 [ 680.846899][ T5895] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 680.856853][ T5895] usb 8-1: USB disconnect, device number 38 [ 681.562358][ T5827] Bluetooth: hci4: command tx timeout [ 681.718287][ T5895] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 682.028206][ T29] audit: type=1400 audit(2000000246.860:5528): avc: denied { write } for pid=13673 comm="syz.5.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 682.072505][T13678] syz.7.1700 (13678): drop_caches: 2 [ 682.081592][T13678] syz.7.1700 (13678): drop_caches: 2 [ 682.145829][ T5895] usb 9-1: Using ep0 maxpacket: 8 [ 682.165307][ T5895] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 682.184874][ T5895] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 682.234352][ T5895] usb 9-1: Product: syz [ 682.238569][ T5895] usb 9-1: Manufacturer: syz [ 682.243306][ T5895] usb 9-1: SerialNumber: syz [ 682.356392][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1699'. [ 682.796533][ T5895] usb 9-1: config 0 descriptor?? [ 682.810340][ T5895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 683.471371][ T5895] gspca_zc3xx: reg_r err -71 [ 683.476048][ T5895] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 683.510251][ T5895] usb 9-1: USB disconnect, device number 21 [ 683.629952][ T5827] Bluetooth: hci4: command tx timeout [ 683.661462][ T29] audit: type=1400 audit(2000000248.520:5529): avc: denied { getopt } for pid=13692 comm="syz.6.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 683.737263][ T7040] team0 (unregistering): Port device team_slave_1 removed [ 684.568928][ T7040] team0 (unregistering): Port device team_slave_0 removed [ 685.430033][ T5866] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 685.490150][T13705] Falling back ldisc for ttyS3. [ 685.579879][ T5866] usb 9-1: Using ep0 maxpacket: 32 [ 685.597193][ T5866] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 685.620369][ T5866] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.649921][ T5866] usb 9-1: config 0 has no interface number 0 [ 685.650416][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.663281][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.664608][ T5866] usb 9-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 685.709826][ T5827] Bluetooth: hci4: command tx timeout [ 685.786820][ T5866] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 685.824213][ T5866] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 685.869947][ T5866] usb 9-1: Product: syz [ 685.889820][ T5866] usb 9-1: SerialNumber: syz [ 685.900269][ T5866] usb 9-1: config 0 descriptor?? [ 685.928982][ T5866] hub 9-1:0.89: bad descriptor, ignoring hub [ 685.939062][ T5866] hub 9-1:0.89: probe with driver hub failed with error -5 [ 685.970293][ T5866] option 9-1:0.89: GSM modem (1-port) converter detected [ 686.660365][ T5866] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 686.855050][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 686.867606][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.884002][ T5866] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 686.895418][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.910943][ T5866] usb 6-1: config 0 descriptor?? [ 686.919380][ T30] INFO: task syz.4.1288:12048 blocked for more than 143 seconds. [ 686.927294][ T30] Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 686.935529][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 686.944287][ T30] task:syz.4.1288 state:D stack:25792 pid:12048 tgid:12044 ppid:5815 flags:0x00000004 [ 686.954648][ T30] Call Trace: [ 686.957929][ T30] SYZFAIL: failed to recv rpc [ 686.960916][ T30] __schedule+0xe58/0x5ad0 [ 686.965966][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 686.967413][ T29] audit: type=1400 audit(2000000251.820:5530): avc: denied { write } for pid=5801 comm="syz-executor" path="pipe:[4031]" dev="pipefs" ino=4031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 686.971212][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 686.971257][ T30] ? __pfx___schedule+0x10/0x10 [ 686.971282][ T30] ? schedule+0x298/0x350 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 686.971303][ T30] ? __pfx_lock_release+0x10/0x10 [ 686.971325][ T30] ? __mutex_trylock_common+0x78/0x250 [ 686.971349][ T30] ? lock_acquire+0x2f/0xb0 [ 686.971367][ T30] ? schedule+0x1fd/0x350 [ 686.971391][ T30] schedule+0xe7/0x350 [ 687.039899][ T30] schedule_preempt_disabled+0x13/0x30 [ 687.045618][ T30] __mutex_lock+0x62b/0xa60 [ 687.050359][ T5871] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 687.090071][ T30] ? rcu_watching_snap_stopped_since+0xc1/0x110 [ 687.119962][ T30] ? nfsd_nl_version_get_doit+0x183/0x780 [ 687.126073][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 687.174116][ T30] ? __build_skb_around+0x278/0x3b0 [ 687.179424][ T30] ? skb_put+0x138/0x1b0 [ 687.184363][ T30] ? __nlmsg_put+0x152/0x1c0 [ 687.189013][ T30] ? nfsd_nl_version_get_doit+0x183/0x780 [ 687.194776][ T30] nfsd_nl_version_get_doit+0x183/0x780 [ 687.200361][ T30] ? kasan_quarantine_put+0x10a/0x240 [ 687.205764][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.211078][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 687.217138][ T30] ? hlock_class+0x4e/0x130 [ 687.221660][ T30] ? mark_lock+0xb5/0xc60 [ 687.225979][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 687.233433][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 687.238998][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 687.245231][ T30] ? __pfx_lock_release+0x10/0x10 [ 687.250415][ T30] ? genl_get_cmd+0x195/0x580 [ 687.255180][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 687.260573][ T30] genl_rcv_msg+0x565/0x800 [ 687.265091][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 687.270175][ T5871] usb 8-1: Using ep0 maxpacket: 32 [ 687.276093][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 687.282248][ T30] netlink_rcv_skb+0x16b/0x440 [ 687.287053][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 687.292144][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 687.297464][ T30] ? down_read+0xc9/0x330 [ 687.301837][ T30] ? __pfx_down_read+0x10/0x10 [ 687.306634][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 687.312013][ T30] genl_rcv+0x28/0x40 [ 687.316033][ T30] netlink_unicast+0x53c/0x7f0 [ 687.321115][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 687.326497][ T30] netlink_sendmsg+0x8b8/0xd70 [ 687.331345][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.336661][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 687.341468][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 687.346987][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.352375][ T30] ___sys_sendmsg+0x135/0x1e0 [ 687.357071][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.362330][ T30] ? __pfx_lock_release+0x10/0x10 [ 687.367369][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 687.372710][ T30] ? __fget_files+0x206/0x3a0 [ 687.377502][ T30] __sys_sendmsg+0x16e/0x220 [ 687.382203][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.387326][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 687.392449][ T30] do_syscall_64+0xcd/0x250 [ 687.396992][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.402958][ T30] RIP: 0033:0x7ff4adf85d29 [ 687.407383][ T30] RSP: 002b:00007ff4aece1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.415905][ T30] RAX: ffffffffffffffda RBX: 00007ff4ae175fa0 RCX: 00007ff4adf85d29 [ 687.424631][ T30] RDX: 0000000024000100 RSI: 0000000020001740 RDI: 0000000000000003 [ 687.432718][ T30] RBP: 00007ff4ae001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 687.440737][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.448771][ T30] R13: 0000000000000000 R14: 00007ff4ae175fa0 R15: 00007ffc724b8078 [ 687.456797][ T30] [ 687.459890][ T30] [ 687.459890][ T30] Showing all locks held in the system: [ 687.467660][ T30] 1 lock held by khungtaskd/30: [ 687.472742][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 687.482863][ T30] 3 locks held by kworker/u8:6/2126: [ 687.488141][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 687.499347][ T30] #1: ffffc900052e7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 687.509795][ T30] #2: ffffffff8fedc908 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 687.519126][ T30] 2 locks held by getty/5566: [ 687.524158][ T30] #0: ffff88814db120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 687.534067][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 687.544360][ T30] 5 locks held by kworker/0:4/5866: [ 687.549644][ T30] #0: ffff888144aae548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 687.561249][ T30] #1: ffffc9000428fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 687.572558][ T30] #2: ffff888028e66190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 687.581725][ T30] #3: ffff88806f231190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 687.591057][ T30] #4: ffff88805d99d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 687.600460][ T30] 5 locks held by kworker/0:5/5871: [ 687.605672][ T30] #0: ffff888144aae548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 687.616513][ T30] #1: ffffc900030c7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 687.627776][ T30] #2: ffff888028e76190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 687.640579][ T30] #3: ffff888028e89510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x27ec/0x4e10 [ 687.650881][ T30] #4: ffff888028da0568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2815/0x4e10 [ 687.660668][ T30] 5 locks held by kworker/u8:14/7040: [ 687.666038][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 687.676473][ T30] #1: ffffc90003aafd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 687.686663][ T30] #2: ffffffff8fec6d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0 [ 687.696086][ T30] #3: ffffffff8fedc908 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8c/0xae0 [ 687.706143][ T30] #4: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 687.716429][ T30] 2 locks held by syz.2.1137/11132: [ 687.722349][ T30] #0: ffffffff8ff7b910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 687.730705][ T30] #1: ffffffff8e5be0e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xe3/0x1b40 [ 687.740866][ T30] 2 locks held by syz.4.1288/12048: [ 687.746056][ T30] #0: ffffffff8ff7b910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 687.754369][ T30] #1: ffffffff8e5be0e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x183/0x780 [ 687.764640][ T30] 2 locks held by syz-executor/13641: [ 687.770060][ T30] #0: ffffffff905f7260 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x10f/0x2c0 [ 687.779799][ T30] #1: ffffffff8fedc908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 687.789031][ T30] 1 lock held by syz.8.1706/13710: [ 687.794222][ T30] #0: ffffffff8fedc908 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x4f0/0x4760 [ 687.799938][ T5827] Bluetooth: hci4: command tx timeout [ 687.803572][ T30] 1 lock held by syz.6.1705/13706: [ 687.814110][ T30] #0: ffffffff8fedc908 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x1a1/0x10c0 [ 687.823857][ T30] 1 lock held by syz.5.1707/13708: [ 687.829316][ T30] #0: ffffffff8fedc908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 687.838449][ T30] 1 lock held by syz.7.1709/13715: [ 687.843583][ T30] #0: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 687.853648][ T30] [ 687.856008][ T30] ============================================= [ 687.856008][ T30] [ 687.864626][ T30] NMI backtrace for cpu 0 [ 687.868972][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 687.879489][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 687.889567][ T30] Call Trace: [ 687.892945][ T30] [ 687.895882][ T30] dump_stack_lvl+0x116/0x1f0 [ 687.900582][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 687.905543][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 687.911546][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 687.917546][ T30] watchdog+0xf14/0x1240 [ 687.922601][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.927319][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.932544][ T30] ? __kthread_parkme+0x148/0x220 [ 687.937602][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.942306][ T30] kthread+0x2c1/0x3a0 [ 687.946403][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.951641][ T30] ? __pfx_kthread+0x10/0x10 [ 687.956264][ T30] ret_from_fork+0x45/0x80 [ 687.960670][ T30] ? __pfx_kthread+0x10/0x10 [ 687.965247][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.970016][ T30] [ 687.973558][ T30] Sending NMI from CPU 0 to CPUs 1: [ 687.978828][ C1] NMI backtrace for cpu 1 [ 687.978841][ C1] CPU: 1 UID: 0 PID: 2123 Comm: kworker/u8:5 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 687.978859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 687.978867][ C1] Workqueue: events_unbound toggle_allocation_gate [ 687.978890][ C1] RIP: 0010:kasan_check_range+0x1a/0x1a0 [ 687.978912][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 <53> 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 [ 687.978934][ C1] RSP: 0018:ffffc90004fb77c8 EFLAGS: 00000082 [ 687.978947][ C1] RAX: ffffffff96e51cc8 RBX: 0000000000000003 RCX: ffffffff8175d13e [ 687.978957][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff96e51cc0 [ 687.978966][ C1] RBP: ffffc90004fb7930 R08: 0000000000000000 R09: fffffbfff2dca39b [ 687.978976][ C1] R10: ffffffff96e51cdf R11: 0000000000000006 R12: ffff88802a28c880 [ 687.978985][ C1] R13: 0000000000000008 R14: 0000000000000003 R15: 1ffff920009f6f04 [ 687.978994][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 687.979013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.979023][ C1] CR2: 000000110c338287 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 687.979032][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 687.979041][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 687.979051][ C1] Call Trace: [ 687.979057][ C1] [ 687.979064][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 687.979081][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 687.979096][ C1] ? nmi_handle+0x1ac/0x5d0 [ 687.979112][ C1] ? kasan_check_range+0x1a/0x1a0 [ 687.979131][ C1] ? default_do_nmi+0x6a/0x160 [ 687.979145][ C1] ? exc_nmi+0x170/0x1e0 [ 687.979158][ C1] ? end_repeat_nmi+0xf/0x53 [ 687.979178][ C1] ? hlock_class+0x4e/0x130 [ 687.979202][ C1] ? kasan_check_range+0x1a/0x1a0 [ 687.979221][ C1] ? kasan_check_range+0x1a/0x1a0 [ 687.979239][ C1] ? kasan_check_range+0x1a/0x1a0 [ 687.979258][ C1] [ 687.979262][ C1] [ 687.979267][ C1] hlock_class+0x4e/0x130 [ 687.979285][ C1] mark_lock+0xb5/0xc60 [ 687.979299][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 687.979316][ C1] ? __pfx_mark_lock+0x10/0x10 [ 687.979332][ C1] ? lock_acquire+0x2f/0xb0 [ 687.979346][ C1] ? __page_table_check_pte_clear+0xb1/0x580 [ 687.979364][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 687.979380][ C1] ? find_held_lock+0x2d/0x110 [ 687.979397][ C1] ? find_held_lock+0x2d/0x110 [ 687.979415][ C1] ? __text_poke+0x643/0xca0 [ 687.979433][ C1] ? llist_add_batch+0x100/0x160 [ 687.979449][ C1] mark_held_locks+0x9f/0xe0 [ 687.979466][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 687.979483][ C1] lockdep_hardirqs_on_prepare+0x137/0x420 [ 687.979498][ C1] trace_hardirqs_on+0x36/0x40 [ 687.979515][ C1] smp_call_function_many_cond+0xf3c/0x1300 [ 687.979534][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 687.979552][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 687.979568][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 687.979586][ C1] text_poke_bp_batch+0x561/0x760 [ 687.979607][ C1] ? __kmalloc_node_track_caller_noprof+0xe5/0x510 [ 687.979626][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 687.979643][ C1] ? __jump_label_patch+0x1db/0x400 [ 687.979663][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 687.979685][ C1] text_poke_finish+0x30/0x40 [ 687.979705][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 687.979724][ C1] jump_label_update+0x1d7/0x400 [ 687.979747][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 687.979769][ C1] static_key_enable+0x1a/0x20 [ 687.979790][ C1] toggle_allocation_gate+0xfc/0x260 [ 687.979806][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 687.979821][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 687.979840][ C1] ? process_one_work+0x921/0x1ba0 [ 687.979856][ C1] ? lock_acquire+0x2f/0xb0 [ 687.979869][ C1] ? process_one_work+0x921/0x1ba0 [ 687.979885][ C1] process_one_work+0x9c5/0x1ba0 [ 687.979903][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 687.979932][ C1] ? __pfx_process_one_work+0x10/0x10 [ 687.979946][ C1] ? rcu_is_watching+0x12/0xc0 [ 687.979967][ C1] ? assign_work+0x1a0/0x250 [ 687.979982][ C1] worker_thread+0x6c8/0xf00 [ 687.980002][ C1] ? __pfx_worker_thread+0x10/0x10 [ 687.980017][ C1] kthread+0x2c1/0x3a0 [ 687.980034][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.980052][ C1] ? __pfx_kthread+0x10/0x10 [ 687.980071][ C1] ret_from_fork+0x45/0x80 [ 687.980084][ C1] ? __pfx_kthread+0x10/0x10 [ 687.980101][ C1] ret_from_fork_asm+0x1a/0x30 [ 687.980126][ C1] [ 687.989116][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 687.989130][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 687.989149][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 687.989159][ T30] Call Trace: [ 687.989165][ T30] [ 687.989172][ T30] dump_stack_lvl+0x3d/0x1f0 [ 687.989201][ T30] panic+0x71d/0x800 [ 687.989226][ T30] ? __pfx_panic+0x10/0x10 [ 687.989248][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 687.989270][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 687.989286][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 687.989305][ T30] ? watchdog+0xd7e/0x1240 [ 687.989325][ T30] ? watchdog+0xd71/0x1240 [ 687.989347][ T30] watchdog+0xd8f/0x1240 [ 687.989369][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.989388][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.989410][ T30] ? __kthread_parkme+0x148/0x220 [ 687.989432][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.989452][ T30] kthread+0x2c1/0x3a0 [ 687.989471][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.989490][ T30] ? __pfx_kthread+0x10/0x10 [ 687.989511][ T30] ret_from_fork+0x45/0x80 [ 687.989527][ T30] ? __pfx_kthread+0x10/0x10 [ 687.989548][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.989579][ T30] [ 688.558493][ T30] Kernel Offset: disabled [ 688.562810][ T30] Rebooting in 86400 seconds..