last executing test programs: 5m32.08123922s ago: executing program 4 (id=31): socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0xf41ee000) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00'/10, 0xa, 0x4000000, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002000001000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000007060108000000000000000000002e92d85fafa06f43fdd653000005e900000600a500"], 0x1c}, 0x1, 0x0, 0x0, 0x111}, 0x0) read(r4, &(0x7f00000000c0)=""/81, 0x51) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x34bb41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0x44, 0x80001) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r7, 0x0, 0x0, r7}) 5m31.215474762s ago: executing program 4 (id=32): socket$inet_dccp(0x2, 0x6, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040)=0xfffffffd, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prlimit64(0x0, 0x7, &(0x7f0000000300)={0xff, 0x6}, &(0x7f0000000340)) timerfd_create(0x2, 0x0) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) (async) read$dsp(r0, &(0x7f0000002200)=""/4126, 0x101e) (async) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc2) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001008bb2fa40628600000c000200ffffffffffff"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x85) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x1000000, 0x0) (async) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) (async) r8 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0xc4f05e22fede7f16, 0x3, 0x338, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m30.551425596s ago: executing program 4 (id=36): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000340)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x00\x00\x00\x00\x00et/\x00\x00v4\x00\x00s/\x92ync__\x85e\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x2, 0x100) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000480)={0x60, 0x17, 0x5, 0x40, 0xaf, 0xfffffff9, &(0x7f00000003c0)="799c93d166831c99dee72813f200e111fbaa06a1c11fbdb375526c510086ddb5343414f4df05531e7543b7c2c68e820f2a026254ebb99f43cb0540815d2af5c92094553dfbf8dbb32ca623d1fbed8b452f867616da206e3e8eb99f603e195090a6cd0c3e69469d8c2b56653a351d3d086ad1b288c30c8be12231b16d45dc15e781be7863d32ef6e9c9bc10462006f9959934829236e9db9772ea30fa9635ee19fe84293dc47aa72fa56326bc06401c"}) fchdir(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000240)=""/33, 0x21) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m30.397164667s ago: executing program 4 (id=38): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000880)=""/38, 0x0, 0x26, 0x1, 0xfffff806, 0x0, @void, @value}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000082920095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f0000000040)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000008c0)}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x54, 0x12, 0x81c0ba3cd11c26f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [], [], 0x0, [0x0, 0x5]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0396b55d"}]}, 0x54}}, 0x0) 5m30.202948432s ago: executing program 4 (id=39): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) dup2(r5, r4) r6 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r7}, &(0x7f0000000040)=""/52, 0x34, &(0x7f0000000380)={&(0x7f0000000300)={'crct10dif-pclmul\x00'}}) (async) symlink(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00') (async) lsetxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_access\x00', &(0x7f0000002680)=ANY=[@ANYBLOB="020000000100000000000000040000000000000400000000000000002001000000000000"], 0x24, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5m29.768117437s ago: executing program 4 (id=42): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f00000000c0), &(0x7f00000001c0)=r5}, 0x20) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000580)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 5m29.551476493s ago: executing program 32 (id=42): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f00000000c0), &(0x7f00000001c0)=r5}, 0x20) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000580)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 2m33.771711565s ago: executing program 5 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000084b2daf21d84eeb9d80e10239f132e0000000001000000000000005300"/43], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xc4dc, 0x8}}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5800005, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1b4d58bc7624eef5de7679b392c2a0a5e38afa7a8a23fd8e93faff31029415e4d14643cd9a824545c1b0c7b01b82b85f3673f76c74e6cab410d6e5513ba4e1a7dca24248807edf4b35e3c1234a56a4b477dfe88d1fd0b3acb5d7a534cda231a1c1ae8c7c2b30787290d6806f2382beac81f94047bb79099f6af6e7eb6b1f2dee3a1452ba1e70af0bcb077d52229cd92e1233f056fd4dc39a7619bce8fc69efe38016f41f2185f224a2c12061d45a480a4694521a68db3156d1af11c421749c8a688a477169cd3724ad3350b26d44abf2194669a75efc2ccc39b79bf7eb", @ANYRES32=0x0, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100000a2c1b0000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020078ab4201569716da7a30000000000900030073797a3200000000a8d97effb6d9cf14000000110001"], 0x80}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000001100)=@newtaction={0x724, 0x30, 0x10, 0x0, 0x0, {}, [{0x448, 0x1, [@m_sample={0xc4, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x2, 0xffffffffffffffff, 0xe49e, 0xc070}}]}, {0x76, 0x6, "d01488591ed6fb630293dc821fffb3036f24667323616a9d1391405c5ad62ab32aac7971691d98db4dae9782a60c7a6d21bf7fa4f2b69fd8275a769a8eba8f2e81a9a9f29cf6c5cf54641f030000000037751ec3bcd2aa7d4029cf356a20bd28b304f1cb00f71a6b2296c247718c69f784f4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xa8, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x1, 0x5, 0x491c, 0x9}}]}, {0x5c, 0x6, "894400f52b7afcca3fb3f285b3b50a856ef5081ad3ad031cd4c0841288fccf94ba06a8c63f8c5a0f7dc66624b46ddc51f2027e2a6e793da6d0b477054f178600f8c94c2e0ef4d7648609547f09280966b99ef21786626030"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x168, 0x11, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9, 0x8, 0x2, 0x7}, {0xf, 0x3, 0x4, 0x7}, {0x0, 0x6, 0x0, 0x5}, {0xfffc, 0xf0, 0x7, 0x8}, {0x8d7e, 0x2, 0x4, 0xd}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}]}, {0xfc, 0x6, "a72d3f959554c6a0f8bc47314989f04d680f22930ea9ab03953c1fa975cee268469f753509b660a1d36096ec1266812bc08fad29cab4eca0915d3a494c7fb433601dff43eaad40c5d432b1c1df9f41d70e2fa920bdf7f82758472e66c6931b742c50e99867f064708fca0c7cec417f67540e0d771dc19eda424882c9ddf18cb718fe11de47b1d875f67b71858c5c6af2c0a116efadedbf96ea10651bce99d0a271fd39df356a20ad10e7036dc0eaf7dbd2fa428ba31b8329ade65afbe04c58708d9d7f44737e1ac0bd27fe87d283bae100ada0e977e94d9fa8e5101e9a660716dcdf7a9eb35121b16f6e22b5ae8433ed722a79eddb06ae23"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x8c, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xdb8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x3d, 0x6, "74963849ecd5fb2064c0f92b9672d2bb789c8fe51b75312b8b9ef0cc45c6ac37562e3287cd75172e5e38d96ebfc7a0948033ce79caf596f8d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xe4, 0xa, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfe}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7f}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x71}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xfffffbcc, 0xffffffffffffffff, 0x7, 0x47ab}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xc6c7, 0x10000000, 0xff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffff}]}, {0x4f, 0x6, "7c30dda6041b38552fd87e7697bab5f7c4171cddddd7be21deb280059359c18284393da45d1e92453fe6182c304e078e132ceb8a8f4f871160c46e240d0b1f81a640d55742fe22eab28df0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x2c8, 0x1, [@m_mirred={0x16c, 0xa, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x200003, 0x80000000, 0xffffffffffffffff, 0x41}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x7, 0x9b7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0xffffffffffffffff, 0x9, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x2, 0x9, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100010, 0xeeb1, 0xfffffffffffffff2, 0x4, 0x8}, 0x1}}]}, {0xa0, 0x6, "9181d3a19bf33a3308f2c2e2d474e19ef2b7de11fa36f72695fe160576d90a0492a986c413cee88789b602defc6a105f87c57d8b1d062e29b80395d2925cb8df3df737401c74bdb73039058dc1f57191f19f23b3193eb15d41209dec8fbbe5a16d54505a7cf09a17588fd7254cf25de45a3b1e4ccf21f73d15b81cc1d33598d3187044e7b4117e9f1d354a06088d8b6d529a705dc2bf3c9dd6690875"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x158, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8e, 0x8, 0x10, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xdd4, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x820, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12d, 0x2}}]}, {0xf0, 0x6, "5fee3b6da9d67f0259b0e594a27f0ccf52ca4159b0a30794dbce8a897bf2eca2648cef96cf15222bf4176eeb0de74373330eaf571e9fb6340c6834835c9277111dcee2b5c2878c973ee70d7a0f24d8ae3ac5dd66adc4510100b2ce7cbdcd7f56ed6c06cf9bbbf3eb7ef3eeb3abf2dd0b11e423148be07f2a2475fe2ed40e9dac8d43317c440c11fa786d4d0e719a4179d68d910747914d7301ec13d92157f74d0acb43fa545c50301ec65dd9ba1a9c992d19e669fd1982557ac8a7bcdcb9371822dbccc6fbc65e7ebe115d7950def15aeee6c4797a37d3b0b76b6385266992e63e0d88af1ddea0c674268c92"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x724}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817008035", 0x33fe0}], 0x1}, 0x0) setresuid(0x0, 0x0, 0xee00) prlimit64(0x0, 0xd, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/221, 0xffffffffffffff62}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000380)=""/110, 0x6e}], 0x5, 0x2, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m33.255110246s ago: executing program 5 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = fsmount(0xffffffffffffffff, 0x1, 0xd) r1 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002640)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./bus/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x4a1, &(0x7f0000004780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@euid_lt={'euid<', r3}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x61, 0x39, 0x61, 0x66, 0x32, 0x61, 0x32], 0x2d, [0x0, 0x37, 0x34, 0x61], 0x2d, [0x36, 0x36, 0x30, 0x33], 0x2d, [0x63, 0x62, 0x37, 0x30], 0x2d, [0x4c, 0x39, 0x35, 0x36, 0x34, 0x36, 0x33, 0x61]}}}, {@euid_lt={'euid<', r5}}]}}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x41e2fe, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020660b, &(0x7f0000000280)={0x0, 0xfffffffeffd, 0x0, 0x0, 0x49249b0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', '', [{0x20, '&'}], 0xa, "cda8f3e8c7c65aa845de77a5c9edc4d21e37828a84e9f42e9937938bb6d17c4b4cc22b6418e79199690fb1d42e11a589594d4fe9a476061d63584b3f25c09a5508e6bfc5bc5ead79579b0b47e21fa716b4bd58202c70ef06250c69c5d9515726f3533a6fd3136fe5547e244b3de2b4c5a851b171a63e1b2c93660e7ea7e7d803d5e7563adf85c7a2ae0791546a97b8f2fd3228720ac1d60c11f6c368dbabd25d23d738668a83e07c683f3b5be8ede8a0c18235d92563c69c7aef17cc25ba12156b8f41739bae89af53be13e065f5618300143f3b8351b2192cbca892daa2a0f942701801ddd7d08003170ebfe2bd0e742dcb2e4c5d427521e002"}, 0x100) 2m33.12411733s ago: executing program 5 (id=553): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000), 0x4) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)={'tunl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) r6 = fsopen(0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) fdatasync(0xffffffffffffffff) (async) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) signalfd4(r6, &(0x7f0000000040)={[0x8001]}, 0x8, 0x800) (async) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) (async) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r8, 0x83000000) (async, rerun: 64) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (rerun: 64) fchdir(r9) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 2m32.03559394s ago: executing program 5 (id=558): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)=@arm64_sys={0x603000000013df72, &(0x7f0000000000)=0x9}) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000080)={0x1c1}) 2m31.900560591s ago: executing program 5 (id=559): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x19, 0x6}]}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="80fd", 0x2}], 0xa, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x7b5643, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000040)) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000000)=@generic={0x3, 0xffffffff, 0x8000000000000001}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(r3, 0xffffffffffffffff, 0x0) 2m31.592533545s ago: executing program 5 (id=561): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) r0 = socket(0x1, 0x803, 0x0) connect$qrtr(r0, &(0x7f0000001b80)={0x2a, 0x1, 0x7ffe}, 0xc) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000002c0)) 2m15.753895409s ago: executing program 33 (id=561): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) r0 = socket(0x1, 0x803, 0x0) connect$qrtr(r0, &(0x7f0000001b80)={0x2a, 0x1, 0x7ffe}, 0xc) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000002c0)) 1m24.79176922s ago: executing program 1 (id=245): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0x800) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x81, 0x9210, 0x67, &(0x7f0000000040)="e9c452980b34d4181c6add20e69c8ddd34f7797f32871b16a39104f3641ff7732d453bf6e900f30c73a6ec4c26ac3ec209275c3e20925b4c9e3f9e33f63e0567a6eec0d4d83383317d7edab987677307a6b73f82b7841d3ab0241fcfc26ecbd000696c5bb99795"}], 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a0000010724140000000009058103"], 0x0) 1m19.90449732s ago: executing program 3 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x10000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x2}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 1m11.337271039s ago: executing program 1 (id=245): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0x800) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x81, 0x9210, 0x67, &(0x7f0000000040)="e9c452980b34d4181c6add20e69c8ddd34f7797f32871b16a39104f3641ff7732d453bf6e900f30c73a6ec4c26ac3ec209275c3e20925b4c9e3f9e33f63e0567a6eec0d4d83383317d7edab987677307a6b73f82b7841d3ab0241fcfc26ecbd000696c5bb99795"}], 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a0000010724140000000009058103"], 0x0) 1m9.748131611s ago: executing program 3 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x10000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x2}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 54.272276665s ago: executing program 1 (id=245): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0x800) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x81, 0x9210, 0x67, &(0x7f0000000040)="e9c452980b34d4181c6add20e69c8ddd34f7797f32871b16a39104f3641ff7732d453bf6e900f30c73a6ec4c26ac3ec209275c3e20925b4c9e3f9e33f63e0567a6eec0d4d83383317d7edab987677307a6b73f82b7841d3ab0241fcfc26ecbd000696c5bb99795"}], 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a0000010724140000000009058103"], 0x0) 50.728174259s ago: executing program 3 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x10000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x2}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 35.751808749s ago: executing program 1 (id=245): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0x800) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x81, 0x9210, 0x67, &(0x7f0000000040)="e9c452980b34d4181c6add20e69c8ddd34f7797f32871b16a39104f3641ff7732d453bf6e900f30c73a6ec4c26ac3ec209275c3e20925b4c9e3f9e33f63e0567a6eec0d4d83383317d7edab987677307a6b73f82b7841d3ab0241fcfc26ecbd000696c5bb99795"}], 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a0000010724140000000009058103"], 0x0) 30.655070665s ago: executing program 3 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x10000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x2}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 22.830484274s ago: executing program 1 (id=245): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0x800) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x81, 0x9210, 0x67, &(0x7f0000000040)="e9c452980b34d4181c6add20e69c8ddd34f7797f32871b16a39104f3641ff7732d453bf6e900f30c73a6ec4c26ac3ec209275c3e20925b4c9e3f9e33f63e0567a6eec0d4d83383317d7edab987677307a6b73f82b7841d3ab0241fcfc26ecbd000696c5bb99795"}], 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a0000010724140000000009058103"], 0x0) 20.61771256s ago: executing program 3 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x10000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x2}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 13.148680259s ago: executing program 0 (id=835): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2, 0x8, 0xe, 0x2, 0x2a, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sec_ctx={0x16, 0x18, 0xc4, 0x6, 0xa5, "005773e399506b97347dddbee3d519258a7f2f13b56dd318b963504fea2d258542a86bd9827cf2c133e262e6be26a2c3592debe9f67518493c4871b6b720ec84a527636dd53036900a04d16c35716360211f12fe7bb9d566d1752f77d7dbca529aa1675d8ccd62f596e18a2a79bf14424bda61261e39c7f8eb489a1c483376758f25349fb351531657c5cec8cc1af525dc5adab8cb55687011eb7fc23ede8cf2083d2a34be"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_sec_ctx={0x4, 0x18, 0x5, 0xd, 0x14, "34e7c20c4029c460705bc0f38ddab33e0b372246"}, @sadb_address={0x5, 0x5, 0x33, 0x20, 0x0, @in6={0xa, 0x4e21, 0x0, @private2, 0x3}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_lifetime={0x4, 0x3, 0x7ff, 0x8, 0x7, 0x50c}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}]}, 0x150}}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f00000008c0)={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3}, {0xa, 0x4e24, 0xc1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa5}, 0x0, {[0x3, 0x1, 0x7, 0x3, 0x87, 0x7fffffff, 0xfffffff9, 0x5]}}, 0x5c) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x7) r9 = gettid() r10 = geteuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001f00)={0x0, 0x0, 0x0}, &(0x7f0000001f40)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000041c0)=0x0) lstat(&(0x7f0000004200)='./file0\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = accept4$x25(0xffffffffffffffff, &(0x7f00000042c0), &(0x7f0000004300)=0x12, 0x800) sendmmsg$unix(r4, &(0x7f0000004440)=[{{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001e80)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="8b5765d1278bf5c24d689bec7242fc8ec5b05656d8cec2d6ed9c44065a658d1f72fca40c08593db2b961607d1534123cb498a39b1b26ffc340e47951642c91021dc96bd4f120d1f81f5049f618a21caf35b4ed12e5a147293177f603f01352b358668c", 0x63}, {&(0x7f0000001a40)="1ed57fe0b1021743a9d707d5de92d21be8c36da963edd4c43b13461157a51b71620b1b6e0ea73ab0b180ed37c128c59311785617c68633149f269a181a90972b0b956089d9185397e979c283c86a8dd9f7d6229a65622509439fd69aba9ad2dc3a0e53de033d89301f187487dea31c108b33bd6c0c546b5e4d65dbc1ff9457bdffc177276a54c5449d98d7695656eabee7004bb68a4ca2a4852f99cb057f779e9c08aeb7d8fb9868f8d1cd63db829c7f665ffb741dac4767445ba9b3085859b4", 0xc0}, {&(0x7f0000001b00)="c6cef28a36d7923ed5a4789e0c6f1c2426c888f7eaf4c2f1d56e82718503ca0e9e666cbd69534bb68c56d235a10227b57317139ac4bb75eac92fbe25f3ed13700a0529159eaa4ff04e84b58dcc", 0x4d}, {&(0x7f0000001b80)="097aacc4d3a2d8ff5cf508b2743a59967597f0ed5e3abdd503ce0b0475385ae6ecb2fa101f3db4a08e6bc23a0a46d89ff4be586bf6d55a1dc726a8b3c54912f7624e5c4e05297f8863a450df75462e59b7820eebd2683b91d332308a40903986067f1436b2521ec3130a56df6debd68c7bd6e8858d67aa02de1c701623c6737c24", 0x81}, {&(0x7f0000001c40)="f9f6b82d508e4d9c7f7af88296a544c276a7951a8009ec736812c47bfd7e717bc6c3dcc6d071b08c824192e04c2f0be5652e999e343d778c1af1c5700d50f7a6f3ad40c594d1313d58ecbc99f13b9f56f2aec0bd7dae22bd6268ab2b0ec8acaac8cddfa21b5e7d5d2b6350905160895697528026401f088ce8c9dbb0b4115f8ea3be1c4b955a8c0eca7f5768e28690e0d70f5770a2f8102eb1377b3d0fc7fb1c7f60588640d8bf2bd66d57aa30e2ca9c2cce72698da151638233784f", 0xbc}, {&(0x7f0000001d00)="6cbda92ec0aa02cb69d19ac8f2a86465a0f7dd305467f6776bc839b4d8bda556d327e6af4de9794da1ec4baba795aebac4e7324055853bcfeaf0e541ed52020afd24b301c31d6eb49b22b826fd553c3a83a573b93bf5ba1c2793569d93e7f9ca4e05157d2fd41adcc9ad7766a37e3b08a19bde3764a5738ec117b5fffeeda09a6a32ca095b9dc994348bdc69eddb61163c438c84a91cebbbef25593872233ddd43db22488cc2fd26c05a6a1662040a", 0xaf}, {&(0x7f0000001dc0)="9a9a427d9efafcc48a5fc4adfea8f19af2fc332e9978bc840a16a17ea79c966535fcf1f00ef9997ee7a47e306a7e7ad499002cdf256a95327c461aa37b85656fca17e4dd120d612efd23cbc2437d8e57a2b83b994bc7445096a38355be0d4d160c997c445f8f9807d81cd16d54283942d0dc8d4970a8eba621cf296fad92b50ee5bbb21bf47dc2da473298598fbfda019cd3cfc14776d931c98535acab6e00d27ed1", 0xa2}], 0x8, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x20, 0x4000040}}, {{&(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000002040)="d53869883b6a1edbce1767ff54ea713cc896af708ed21fe614e1758527d87e616ab42e2a7c3e576aabf4b9e30d2034903070a52693ae497b24f2764d8f43a5fb91c3214b51853a8095b9cfc0702995577eda01e3cdfedda754e350264e324e6d32425a6f38c57f8d742c4c9914e1d7c8f95ba1d8af0d2b465894b54db00c33582fd6d16e5a185f41fe58fd34ff4899417f855a9f5a23225edef16bca1215676bfb8adb20543032f2627b232beca87406607012abf80daa181b", 0xb9}, {&(0x7f0000002100)="2baa003e7bcab42ef214ad2658edb052821ddd79631357", 0x17}], 0x2, &(0x7f0000004340)=[@rights={{0x18, 0x1, 0x1, [r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x38, 0x1, 0x1, [r2, r4, r6, r7, r5, r6, r4, r0, r7, r1]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x20, 0x1, 0x1, [r8, r8, r15, r6]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xe8, 0x4048800}}], 0x2, 0x800) fsetxattr$security_ima(r5, &(0x7f00000044c0), &(0x7f0000004500)=@v1={0x2, "9a4b0a1a8c21d9f13f18aa86487282d89a9de6"}, 0x14, 0x2) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000004540)={0x1, @default, @bpq0, 0xab, 'syz0\x00', @null, 0xffffffff, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast]}) setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f00000045c0)="0bd2ebfe0dcf39b8c8ec8e945c1e292221e36c3f4749374519fbba958b2dd038f456e15d69960e7c9db9670ca53547bf3c4ec08f59e299e86a8922f026c25196422a47a19ef0c8a02188bceeaf7ebd205380c503884a5f8ea37ed001cfdfc82a003f0c935b575b0b4284e76327d60ac12328ecb5619073545449b565950c30d790e115332e9479f01e73166679e2793d75e59f37405d3aa385a79ca2b4cbfc180a4ec660cdfe2075e21af425c3268252e557168ca60728663ede6bbb3c5d7898f8b2d7", 0xc3) sendfile(r0, r3, &(0x7f00000046c0)=0xfffffffffffffff8, 0xe633) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000004700)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000004740)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x200, 0xffff}, &(0x7f0000004800)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r16, 0x84, 0x5, &(0x7f0000004840)={r17, @in={{0x2, 0x4e21, @local}}}, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r16, 0x84, 0x17, &(0x7f0000004900)={r17, 0xfff, 0x4e, "d0238a03c18b1436edbbf025aee2472a653f26b7dab3fd104b6c84c9e3555fa942eb7f29cb2440f3917579b89b79a8145145b840dba6038286ae954921eea68440641d3ee1dc74144ea2f4d5c365"}, 0x56) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r16, 0xc0189378, &(0x7f00000049c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12.743749947s ago: executing program 0 (id=836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48, 0x8c4}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200)=0x6, 0x4) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000200)=""/128, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 10.083169495s ago: executing program 0 (id=840): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xa7, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x2, {[@local, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x40085503, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x22008080, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xa7, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x5}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x2, {[@local, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) (async) syz_usb_disconnect(r4) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) (async) ioctl$EVIOCRMFF(r4, 0x40085503, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x22008080, 0x1}) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) 9.736462424s ago: executing program 1 (id=245): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0x800) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x81, 0x9210, 0x67, &(0x7f0000000040)="e9c452980b34d4181c6add20e69c8ddd34f7797f32871b16a39104f3641ff7732d453bf6e900f30c73a6ec4c26ac3ec209275c3e20925b4c9e3f9e33f63e0567a6eec0d4d83383317d7edab987677307a6b73f82b7841d3ab0241fcfc26ecbd000696c5bb99795"}], 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a0000010724140000000009058103"], 0x0) 7.604221123s ago: executing program 0 (id=844): gettid() (async) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106000000000000edff04"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106000000000000edff04"], 0x1c}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000090) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000380)="02b2", 0x2}], 0x1, 0x1dad, 0x80) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x0, 0x0, 0x3}}, 0xe8) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) (async) r7 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000100)={0x1, @capture={0x1000, 0x0, {0x1d8, 0x10}, 0x6, 0x7}}) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0xffffffd1, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000000a00"/40], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.603489624s ago: executing program 2 (id=845): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000900)={0x2f, 0x0, 0x2, 0x5}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000200)={0x1, r4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) 6.227771429s ago: executing program 2 (id=848): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLL', 0x3, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x4, 0x4002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x20001}, 0x18) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.945199062s ago: executing program 0 (id=849): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x24040010) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x5, 0x0) 5.281039512s ago: executing program 6 (id=850): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "0064813998a5f0a55e5ba62005bc0396abdd8bc1b4940a38aee2ce648f05a772f98df10808765650"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}], {0x14}}, 0x108}}, 0x4000040) 5.218832728s ago: executing program 2 (id=851): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "0064813998a5f0a55e5ba62005bc0396abdd8bc1b4940a38aee2ce648f05a772f98df10808765650"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}], {0x14}}, 0x108}}, 0x4000040) 4.303774433s ago: executing program 6 (id=852): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464d0, &(0x7f0000000080)=r2) 4.192560992s ago: executing program 2 (id=853): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x7, 0x4}, {0x2, 0x5, 0x8, 0x3}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}]}, 0x1c) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3b}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x0, 0x2}, 0x0) setreuid(0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)) ioctl$sock_bt_hci(r6, 0x400448c8, 0x0) r7 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) 4.157986875s ago: executing program 6 (id=854): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000900)={0x2f, 0x0, 0x2, 0x5}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000200)={0x1, r4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x9ac294173bf0cfd, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) 2.695322156s ago: executing program 6 (id=855): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000900)={0x2f, 0x0, 0x2, 0x5}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000200)={0x1, r4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) 2.674159011s ago: executing program 2 (id=856): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003980)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x40010, 0xfff7, 0x1, 0x5, 0x8}}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) 2.560840254s ago: executing program 2 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) socket(0x10, 0x400000000080803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x104) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x60da, 0x2, 0x7, 0x4}}) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f0000000640)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r9, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x5, 0xffff, 0x1, 0x7f, 0x800006, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x10005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xceb, 0x200, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x5, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r10 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r10}}, 0x3c) 1.703526218s ago: executing program 6 (id=858): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000900)={0x2f, 0x0, 0x2, 0x5}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000200)={0x1, r4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) 715.88937ms ago: executing program 6 (id=859): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r4, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004740)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1fbcc000}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x5, 0xff, 0x9, 0xfffffc01, 0x7c6, 0x9, 0x5, 0x4, 0x101, 0x3ff, 0xd9, 0x1, 0x29e7, 0xc9, 0x10, 0xfffffff3, 0x9a0, 0x10, 0x8001, 0xb0, 0x9, 0x3, 0x8, 0xf711, 0x101, 0x6, 0xd, 0xfffffffc, 0x1, 0x4, 0xffff6631, 0x4, 0x80000001, 0xffff0c7a, 0x10, 0x3, 0xfff, 0x467, 0x10000, 0x1000, 0xe11, 0xfffffff8, 0x4, 0x0, 0xfff, 0x22d6, 0x9, 0x4, 0x4, 0x5, 0x2, 0x8001, 0xde17, 0xfffffffd, 0x2fadfe0f, 0xbaa, 0x3, 0x6, 0x690, 0x2, 0x7, 0x7, 0x3, 0x5, 0x1, 0xa46, 0x1, 0xffffffff, 0x5, 0x40, 0x101, 0x4, 0x328, 0xa522, 0x8, 0x4b, 0xf0, 0x0, 0xf5, 0x7, 0x2, 0x200, 0x9, 0x2, 0x3, 0x4, 0x7, 0x0, 0x8, 0x6, 0x0, 0x9, 0x3d0c20cf, 0xffffffff, 0x2, 0x7fff, 0x6, 0x53, 0x6, 0x1, 0x2, 0x8, 0x5, 0x1, 0xf0, 0x5, 0x9, 0x16, 0x101, 0xf0b2, 0x10001, 0xff, 0xda32, 0x6, 0x9, 0x0, 0xfffffffb, 0x8, 0x1, 0xd83a, 0x49, 0x5, 0x4, 0x7, 0x7fff, 0x2, 0x2, 0x1, 0x8000, 0x3ff, 0x2, 0x4, 0xfffffffa, 0x5, 0x10, 0xffffffff, 0x7f, 0xffffffff, 0x0, 0x101, 0x8, 0x8, 0xe, 0x9, 0x0, 0x9, 0x80, 0xffff, 0xfffffffb, 0x6, 0xe, 0x9, 0xfffffff9, 0x1, 0xfffffffe, 0xfff, 0x80000001, 0x1, 0x8c, 0x5, 0x4, 0x3, 0x4, 0x3, 0x200, 0x7, 0x7, 0x2, 0x6, 0x2, 0x80000000, 0x5, 0x7, 0x7, 0x364, 0x7f, 0x2, 0x462b, 0x7, 0xd49a, 0xa9, 0x81, 0x7, 0xa785, 0x0, 0x0, 0x2, 0x501, 0x5, 0x0, 0x4, 0x5, 0x3e70, 0xca, 0x1, 0x2, 0x5, 0x1c, 0x937e, 0x0, 0x1, 0x0, 0x600, 0x4, 0x293, 0x7, 0x6, 0x6, 0x3, 0xffffffa7, 0xfc000000, 0xf046, 0x0, 0xd, 0x1, 0x200, 0xb17, 0x4, 0x4, 0x200, 0x80, 0x6, 0xe3f, 0x74c, 0x7, 0x2, 0x5, 0x80000000, 0x4, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x3, 0x3ff, 0x5, 0x2, 0x3, 0x2, 0x3, 0x0, 0x45000, 0xcef4, 0xe37f, 0x9, 0x0, 0x1, 0x8, 0x8, 0x7, 0x6, 0x9, 0x10000]}]}}]}, 0x45c}}, 0x0) 656.174532ms ago: executing program 0 (id=860): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (rerun: 64) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) (async) fsopen(0x0, 0x1) (async) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) (async) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) ioctl$int_in(r4, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x20000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x2, 0x7}}, 0xe8) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 3 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x10000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0}) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x2}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): bpf_probe_write_user helper that may corrupt user memory! [ 317.957592][T10881] syz.0.697[10881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.969356][T10881] syz.0.697[10881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.311385][ T5832] Bluetooth: hci4: command tx timeout [ 318.499969][ T5832] Bluetooth: hci3: command tx timeout [ 318.951709][ T25] usb 3-1: USB disconnect, device number 44 [ 318.959829][ T5940] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 319.140460][ T5940] usb 1-1: device descriptor read/64, error -71 [ 319.363370][ T25] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 319.386313][ T5940] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 319.431557][T10711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.463280][T10711] veth0_vlan: entered promiscuous mode [ 319.473523][T10711] veth1_vlan: entered promiscuous mode [ 319.490400][T10711] veth0_macvtap: entered promiscuous mode [ 319.506805][T10711] veth1_macvtap: entered promiscuous mode [ 319.524597][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.544636][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.554659][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.565170][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.575040][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.585512][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.595372][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.605892][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.617288][T10711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.650954][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.661611][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.671597][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.679794][ T5940] usb 1-1: device descriptor read/64, error -71 [ 319.682140][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.698185][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.708798][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.718859][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.729867][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.741871][T10711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.751167][T10711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.759954][T10711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.768647][T10711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.777544][T10711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.800015][ T5940] usb usb1-port1: attempt power cycle [ 319.937659][T10805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.959666][T10805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.972298][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.981426][T10805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.995844][T10805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.002764][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.067792][ T7734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.083325][ T7734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.160019][ T5940] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 320.180649][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.190214][ T5940] usb 1-1: device descriptor read/8, error -71 [ 320.208735][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.230489][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.237563][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.248259][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.255380][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.339946][ T5832] Bluetooth: hci4: command tx timeout [ 320.429928][ T5940] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 320.468526][ T5940] usb 1-1: device descriptor read/8, error -71 [ 320.593007][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.611721][ T5940] usb usb1-port1: unable to enumerate USB device [ 320.642142][T10805] veth0_vlan: entered promiscuous mode [ 320.656585][T10805] veth1_vlan: entered promiscuous mode [ 320.688023][T10805] veth0_macvtap: entered promiscuous mode [ 320.703370][T10805] veth1_macvtap: entered promiscuous mode [ 320.738628][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.757237][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.767518][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.784031][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.795352][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.811550][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.825969][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.847514][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.858621][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.875357][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.886760][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.909508][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.927466][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.939365][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.958203][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.968572][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.992038][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.008903][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.025228][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.035284][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.049945][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.063062][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.125883][ T6861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.156444][T10805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.165609][T10805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.175068][T10805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.183846][T10805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.254103][ T8545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.271866][ T8545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.293490][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.302939][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.594594][ T6861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.082559][ T6861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.154222][ T6861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.254303][ T6861] bridge_slave_1: left allmulticast mode [ 322.262630][ T6861] bridge_slave_1: left promiscuous mode [ 322.269665][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.279205][ T6861] bridge_slave_0: left allmulticast mode [ 322.285417][ T6861] bridge_slave_0: left promiscuous mode [ 322.291397][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.672216][ T6861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.729009][ T6861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.768647][ T6861] bond0 (unregistering): Released all slaves [ 322.798664][T10985] bond0: (slave macvtap0): Error: Device is in use and cannot be enslaved [ 322.978055][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.988030][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.997595][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.006377][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.036479][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.044912][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.088527][T10990] lo speed is unknown, defaulting to 1000 [ 323.633227][ T6861] hsr_slave_0: left promiscuous mode [ 323.646941][ T6861] hsr_slave_1: left promiscuous mode [ 323.664062][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.672562][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.703420][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.729829][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.755781][ T6861] veth1_macvtap: left promiscuous mode [ 323.765972][ T6861] veth0_macvtap: left promiscuous mode [ 323.772573][ T6861] veth1_vlan: left promiscuous mode [ 323.777959][ T6861] veth0_vlan: left promiscuous mode [ 324.278820][T11025] netlink: 134744 bytes leftover after parsing attributes in process `syz.6.706'. [ 324.294187][T11025] openvswitch: netlink: Message has 76 unknown bytes. [ 324.449756][ T46] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 324.457614][ T965] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 324.558044][ T6861] team0 (unregistering): Port device team_slave_1 removed [ 324.619806][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 324.628983][ T46] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 324.639826][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 324.641892][ T46] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.651120][ T965] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 324.659272][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.682404][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.690993][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.699598][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.701541][ T965] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 324.706989][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 324.715098][ T6861] team0 (unregistering): Port device team_slave_0 removed [ 324.723273][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.744256][ T965] usb 1-1: can't read configurations, error -61 [ 324.750900][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 324.761678][ T46] usb 3-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 324.774334][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.784347][ T46] usb 3-1: config 0 descriptor?? [ 324.932153][ T965] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 325.089727][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 325.095829][ T965] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 325.111447][ T965] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 325.119222][ T965] usb 1-1: can't read configurations, error -61 [ 325.131857][ T965] usb usb1-port1: attempt power cycle [ 325.143590][ T5832] Bluetooth: hci3: command tx timeout [ 325.203975][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.213329][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.225783][ T46] wacom 0003:056A:00C4.0012: unknown main item tag 0x0 [ 325.242784][ T46] wacom 0003:056A:00C4.0012: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.2-1/input0 [ 325.328425][T11026] lo speed is unknown, defaulting to 1000 [ 325.433323][T10990] chnl_net:caif_netlink_parms(): no params data found [ 325.523402][ T965] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 325.622875][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 325.670438][ T965] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 325.763957][ T965] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 325.845945][ T965] usb 1-1: can't read configurations, error -61 [ 326.008132][ T5940] usb 3-1: USB disconnect, device number 46 [ 326.009779][ T965] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 326.029245][T10990] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.054560][T10990] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.079187][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 326.084498][T10990] bridge_slave_0: entered allmulticast mode [ 326.095557][ T965] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 326.109367][T10990] bridge_slave_0: entered promiscuous mode [ 326.137428][T10990] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.145356][ T965] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 326.146537][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.161183][T10990] bridge_slave_1: entered allmulticast mode [ 326.171982][T10990] bridge_slave_1: entered promiscuous mode [ 326.175626][ T965] usb 1-1: can't read configurations, error -61 [ 326.178407][T11054] overlayfs: failed to resolve './file0': -2 [ 326.199536][T11026] chnl_net:caif_netlink_parms(): no params data found [ 326.206671][ T965] usb usb1-port1: unable to enumerate USB device [ 326.399285][T10990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.467489][T10990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.198143][ T5832] Bluetooth: hci4: command tx timeout [ 327.225137][ T5832] Bluetooth: hci3: command tx timeout [ 327.395587][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.478420][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.544651][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.573016][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.588320][ T6861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.603136][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.639976][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.649120][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.676725][T10990] team0: Port device team_slave_0 added [ 327.685932][T10990] team0: Port device team_slave_1 added [ 327.692200][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.722201][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 327.859439][ T6861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.916512][T11026] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.940543][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.950129][T11026] bridge_slave_0: entered allmulticast mode [ 327.965944][T11026] bridge_slave_0: entered promiscuous mode [ 327.974599][T10990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.982506][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.015283][T10990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.043603][ T6861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.057089][T11026] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.065466][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.072872][T11026] bridge_slave_1: entered allmulticast mode [ 328.079576][T11026] bridge_slave_1: entered promiscuous mode [ 328.093083][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.103706][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.130939][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.227550][ T6861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.243820][T11026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.271807][T10990] hsr_slave_0: entered promiscuous mode [ 328.292012][T10990] hsr_slave_1: entered promiscuous mode [ 328.318033][T10990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.325810][T10990] Cannot create hsr debugfs directory [ 328.351484][T11026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.405603][T11026] team0: Port device team_slave_0 added [ 328.433249][T11026] team0: Port device team_slave_1 added [ 328.491677][T11026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.505151][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.549178][T11026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.585011][T11026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.603777][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.642331][T11026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.999744][ T8] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 329.015564][T11026] hsr_slave_0: entered promiscuous mode [ 329.034748][T11026] hsr_slave_1: entered promiscuous mode [ 329.048526][T11026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.058561][T11026] Cannot create hsr debugfs directory [ 329.138251][ T6861] bridge_slave_1: left allmulticast mode [ 329.146679][ T6861] bridge_slave_1: left promiscuous mode [ 329.156087][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.167375][ T6861] bridge_slave_0: left allmulticast mode [ 329.175526][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 329.181751][ T6861] bridge_slave_0: left promiscuous mode [ 329.188318][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 329.202235][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.215569][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 329.224947][ T5832] Bluetooth: hci4: command tx timeout [ 329.234347][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 329.243742][ T8] usb 1-1: Product: syz [ 329.248947][ T8] usb 1-1: Manufacturer: syz [ 329.256507][ T8] usb 1-1: SerialNumber: syz [ 329.265003][ T8] usb 1-1: config 0 descriptor?? [ 329.272288][T11103] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 329.299899][ T5832] Bluetooth: hci3: command tx timeout [ 329.551524][ T46] usb 1-1: USB disconnect, device number 69 [ 329.693812][ T6861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.699985][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 329.699999][ T29] audit: type=1400 audit(1732519400.593:798): avc: denied { accept } for pid=11119 comm="syz.2.720" lport=40470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.734892][ T6861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.744787][ T6861] bond0 (unregistering): Released all slaves [ 330.029995][T10990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.117363][T10990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.243811][ T6861] hsr_slave_0: left promiscuous mode [ 330.250024][ T6861] hsr_slave_1: left promiscuous mode [ 330.256286][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.288359][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.299031][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.313172][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.347557][ T6861] veth1_macvtap: left promiscuous mode [ 330.356836][ T6861] veth0_macvtap: left promiscuous mode [ 330.366840][ T6861] veth1_vlan: left promiscuous mode [ 330.376442][ T6861] veth0_vlan: left promiscuous mode [ 330.590083][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.601094][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.098060][T11131] overlayfs: failed to resolve './file0': -2 [ 331.299825][ T5832] Bluetooth: hci4: command tx timeout [ 331.379999][ T5832] Bluetooth: hci3: command tx timeout [ 331.988097][ T6861] team0 (unregistering): Port device team_slave_1 removed [ 332.031014][ T6861] team0 (unregistering): Port device team_slave_0 removed [ 332.079755][ T5940] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 332.241579][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.261593][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.285773][ T5940] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 332.295353][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.324901][ T5940] usb 3-1: config 0 descriptor?? [ 332.442028][T10990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.541951][T10990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.765624][T10990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.778203][ T5940] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 332.796053][T10990] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.805508][ T5940] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 332.826696][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.833829][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.845627][ T5940] hid-thrustmaster 0003:044F:B65D.0013: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 332.850491][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.864719][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.993147][ T5940] hid-thrustmaster 0003:044F:B65D.0013: Wrong number of endpoints? [ 333.056628][ T29] audit: type=1400 audit(1732519403.883:799): avc: denied { create } for pid=11136 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.077425][T11149] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 333.634740][ T5832] Bluetooth: hci4: command tx timeout [ 333.889351][ T5940] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 333.914657][T11157] macsec0: entered promiscuous mode [ 333.920709][T11157] macsec0: entered allmulticast mode [ 333.932216][ T29] audit: type=1400 audit(1732519403.943:800): avc: denied { execmem } for pid=11136 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 333.967703][T11158] bridge0: port 3(erspan0) entered blocking state [ 333.974404][T11158] bridge0: port 3(erspan0) entered disabled state [ 333.981011][T11158] erspan0: entered allmulticast mode [ 333.987271][ T29] audit: type=1400 audit(1732519404.183:801): avc: denied { create } for pid=11144 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.987579][T11158] erspan0: left allmulticast mode [ 334.017823][T10990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.028671][T10990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.129046][ T5940] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 334.139930][ T29] audit: type=1400 audit(1732519404.183:802): avc: denied { setopt } for pid=11144 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 334.170617][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.180910][T11165] overlayfs: failed to resolve './file0': -2 [ 334.191646][ T29] audit: type=1400 audit(1732519404.193:803): avc: denied { connect } for pid=11144 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 334.203560][ T5940] usb 1-1: Product: syz [ 334.240943][T11026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.247895][ T5940] usb 1-1: Manufacturer: syz [ 334.275008][ T5940] usb 1-1: SerialNumber: syz [ 334.293132][ T29] audit: type=1400 audit(1732519404.193:804): avc: denied { read write } for pid=11144 comm="syz.0.727" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.308461][ T5940] usb 1-1: config 0 descriptor?? [ 334.345650][T10990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.366930][T11026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.368229][ T29] audit: type=1400 audit(1732519404.193:805): avc: denied { open } for pid=11144 comm="syz.0.727" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.414435][T11026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.435146][ T29] audit: type=1400 audit(1732519404.193:806): avc: denied { ioctl } for pid=11144 comm="syz.0.727" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.442824][T11026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.952305][ T29] audit: type=1400 audit(1732519404.353:807): avc: denied { map_create } for pid=11136 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.021507][ T29] audit: type=1400 audit(1732519404.353:808): avc: denied { map_read map_write } for pid=11136 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.045250][T10990] veth0_vlan: entered promiscuous mode [ 335.073740][T10990] veth1_vlan: entered promiscuous mode [ 335.082225][ C1] hid-thrustmaster 0003:044F:B65D.0013: URB to get model id failed with error -71 [ 335.108761][ T29] audit: type=1400 audit(1732519404.353:809): avc: denied { prog_load } for pid=11136 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.134538][ T46] usb 3-1: USB disconnect, device number 47 [ 335.212110][ T29] audit: type=1400 audit(1732519404.353:810): avc: denied { bpf } for pid=11136 comm="syz.2.724" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 335.233620][ T29] audit: type=1400 audit(1732519404.353:811): avc: denied { perfmon } for pid=11136 comm="syz.2.724" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 335.286432][T11026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.294205][ T29] audit: type=1400 audit(1732519404.663:812): avc: denied { read write } for pid=11136 comm="syz.2.724" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 335.335212][T10990] veth0_macvtap: entered promiscuous mode [ 335.349368][T11026] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.371164][ T29] audit: type=1400 audit(1732519404.663:813): avc: denied { open } for pid=11136 comm="syz.2.724" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 335.399345][ T29] audit: type=1400 audit(1732519404.683:814): avc: denied { ioctl } for pid=11136 comm="syz.2.724" path="/dev/vbi9" dev="devtmpfs" ino=1007 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 335.404788][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.425465][ T29] audit: type=1400 audit(1732519404.683:815): avc: denied { shutdown } for pid=11136 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.431190][ T7734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.451144][ T29] audit: type=1400 audit(1732519404.693:816): avc: denied { getopt } for pid=11136 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.485857][T11189] __nla_validate_parse: 55 callbacks suppressed [ 335.485874][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 335.507129][ T5940] usb 1-1: Firmware version (0.0) predates our first public release. [ 335.531716][ T5940] usb 1-1: Please update to version 0.2 or newer [ 335.533263][T10990] veth1_macvtap: entered promiscuous mode [ 335.588009][T11197] overlayfs: failed to resolve './file0': -2 [ 335.604122][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.611275][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.625653][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.637764][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.647960][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.691631][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.719699][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.735243][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.757524][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.757897][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 335.768386][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.769199][T10990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.816694][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.842929][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.919212][ T25] usb 1-1: USB disconnect, device number 70 [ 335.926383][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.936997][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.947351][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.957922][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.968628][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.979672][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.990547][T10990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.006167][T11208] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 336.019578][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 336.056560][T11201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=11201 comm=syz.2.735 [ 336.078770][T10990] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.100586][T10990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.109308][T10990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.118789][T10990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.288708][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.311931][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.773379][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.810961][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.870332][T11224] overlayfs: failed to resolve './file0': -2 [ 337.588868][T11026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.756387][T11242] netlink: 134744 bytes leftover after parsing attributes in process `syz.6.742'. [ 337.884770][T11242] openvswitch: netlink: Message has 76 unknown bytes. [ 338.252933][ T6104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.362173][ T6104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.405236][T11026] veth0_vlan: entered promiscuous mode [ 338.454202][ T6104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.484876][T11026] veth1_vlan: entered promiscuous mode [ 338.560790][ T6104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.608534][T11026] veth0_macvtap: entered promiscuous mode [ 338.627054][T11026] veth1_macvtap: entered promiscuous mode [ 338.686192][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.696942][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.707291][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.718276][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.732100][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.743276][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.753569][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.766670][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.777061][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.792915][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.809793][T11026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.826408][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.859655][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.876488][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.887224][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.897316][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.908611][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.918592][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.929197][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.939243][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.949802][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.964498][T11026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.986154][T11026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.995928][T11026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.005944][T11026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.015204][T11026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.121274][ T6104] bridge_slave_1: left allmulticast mode [ 339.140050][ T6104] bridge_slave_1: left promiscuous mode [ 339.151416][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.164406][ T6104] bridge_slave_0: left allmulticast mode [ 339.171971][ T6104] bridge_slave_0: left promiscuous mode [ 339.181780][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.704946][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.722429][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.787008][ T6104] bond0 (unregistering): Released all slaves [ 340.095745][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 340.095786][ T29] audit: type=1400 audit(1732519410.993:893): avc: denied { setopt } for pid=11295 comm="syz.0.745" laddr=::ffff:172.20.20.170 lport=39300 faddr=::ffff:172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.270550][T11302] veth1_macvtap: left promiscuous mode [ 340.276091][T11302] macsec0: entered promiscuous mode [ 340.281517][T11302] macsec0: entered allmulticast mode [ 340.292826][T11304] bridge0: port 3(erspan0) entered blocking state [ 340.299527][T11304] bridge0: port 3(erspan0) entered disabled state [ 340.306117][T11304] erspan0: entered allmulticast mode [ 340.311916][T11304] erspan0: entered promiscuous mode [ 340.317580][T11304] bridge0: port 3(erspan0) entered blocking state [ 340.324093][T11304] bridge0: port 3(erspan0) entered forwarding state [ 340.490306][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.498209][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.537229][ T29] audit: type=1400 audit(1732519411.433:894): avc: denied { read write } for pid=11308 comm="syz.6.748" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 340.596706][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.604061][ T29] audit: type=1400 audit(1732519411.433:895): avc: denied { open } for pid=11308 comm="syz.6.748" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 340.651477][ T29] audit: type=1400 audit(1732519411.433:896): avc: denied { map } for pid=11308 comm="syz.6.748" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 340.674534][ T29] audit: type=1400 audit(1732519411.433:897): avc: denied { execute } for pid=11308 comm="syz.6.748" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 340.698029][ T29] audit: type=1400 audit(1732519411.433:898): avc: denied { write } for pid=11308 comm="syz.6.748" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.730429][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.744223][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.755595][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.764201][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.764483][ T29] audit: type=1400 audit(1732519411.623:899): avc: denied { create } for pid=11312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.793679][ T29] audit: type=1400 audit(1732519411.623:900): avc: denied { read write } for pid=11312 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 340.818148][ T29] audit: type=1400 audit(1732519411.623:901): avc: denied { open } for pid=11312 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 340.842717][ T29] audit: type=1400 audit(1732519411.633:902): avc: denied { ioctl } for pid=11312 comm="syz-executor" path="socket:[45755]" dev="sockfs" ino=45755 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.867967][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.869233][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.886313][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.099189][T11312] lo speed is unknown, defaulting to 1000 [ 341.310764][ T6104] hsr_slave_0: left promiscuous mode [ 341.317225][ T6104] hsr_slave_1: left promiscuous mode [ 341.343157][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.350809][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.350808][ T5940] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 341.368882][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.378986][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.408778][ T6104] veth1_macvtap: left promiscuous mode [ 341.419281][ T6104] veth0_macvtap: left promiscuous mode [ 341.427595][ T6104] veth1_vlan: left promiscuous mode [ 341.437925][ T6104] veth0_vlan: left promiscuous mode [ 341.459866][ T46] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 341.515538][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 341.529450][ T5940] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 341.545305][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.565376][ T5940] usb 3-1: Product: syz [ 341.569565][ T5940] usb 3-1: Manufacturer: syz [ 341.584909][ T5940] usb 3-1: SerialNumber: syz [ 341.623529][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.635567][ T5940] usb 3-1: config 0 descriptor?? [ 341.645583][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.669122][ T5940] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 341.677871][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.703048][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.730520][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.757777][ T46] usb 1-1: config 0 descriptor?? [ 341.985005][ T46] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 341.995589][ T46] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 342.006239][ T46] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 342.058919][ T5940] gspca_sn9c2028: read1 error -71 [ 342.065382][ T5940] gspca_sn9c2028: read1 error -71 [ 342.080056][ T5940] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 342.097363][ T5940] usb 3-1: USB disconnect, device number 48 [ 342.176527][ T6104] team0 (unregistering): Port device team_slave_1 removed [ 342.184425][T11330] netlink: 'syz.0.752': attribute type 2 has an invalid length. [ 342.192534][T11330] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 342.235113][ T6104] team0 (unregistering): Port device team_slave_0 removed [ 342.695161][T11312] chnl_net:caif_netlink_parms(): no params data found [ 342.773573][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.789829][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.807848][T11312] bridge_slave_0: entered allmulticast mode [ 342.822603][T11312] bridge_slave_0: entered promiscuous mode [ 342.847830][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.869702][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.894595][T11312] bridge_slave_1: entered allmulticast mode [ 342.916230][T11312] bridge_slave_1: entered promiscuous mode [ 342.975153][T11312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.985690][ T5832] Bluetooth: hci3: command tx timeout [ 343.002804][T11312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.049532][T11312] team0: Port device team_slave_0 added [ 343.060544][T11312] team0: Port device team_slave_1 added [ 343.081947][T11312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.094067][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.120693][T11312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.137535][T11312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.147659][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.180341][T11312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.257390][ T8545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.315098][T11312] hsr_slave_0: entered promiscuous mode [ 343.321528][T11312] hsr_slave_1: entered promiscuous mode [ 343.338601][ T8545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.447489][ T8545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.591962][ T8545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.820439][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 344.366084][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.378941][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.391505][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.401534][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.417668][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.425033][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 344.434911][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.459526][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 344.472486][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.487623][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.495374][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 344.504848][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.521301][ T9] usb 3-1: config 0 descriptor?? [ 344.629984][ T25] usb 1-1: USB disconnect, device number 71 [ 345.123028][ T53] Bluetooth: hci3: command tx timeout [ 345.184433][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.260005][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.278481][T11393] lo speed is unknown, defaulting to 1000 [ 345.286777][ T9] wacom 0003:056A:00C4.0015: unknown main item tag 0x0 [ 345.317862][ T9] wacom 0003:056A:00C4.0015: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.2-1/input0 [ 345.342277][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 345.342291][ T29] audit: type=1400 audit(1732519416.243:906): avc: denied { write } for pid=11409 comm="syz.6.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.370002][ T25] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 345.380784][ T8545] bridge_slave_1: left allmulticast mode [ 345.386449][ T8545] bridge_slave_1: left promiscuous mode [ 345.409871][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.438729][ T8545] bridge_slave_0: left allmulticast mode [ 345.446705][ T29] audit: type=1400 audit(1732519416.243:907): avc: denied { name_connect } for pid=11409 comm="syz.6.757" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 345.476574][ T8545] bridge_slave_0: left promiscuous mode [ 345.496072][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.503888][ T29] audit: type=1400 audit(1732519416.403:908): avc: denied { create } for pid=11381 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 345.523712][ T29] audit: type=1400 audit(1732519416.403:909): avc: denied { shutdown } for pid=11381 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 345.550062][ T25] usb 1-1: device descriptor read/64, error -71 [ 345.800195][ T25] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 345.949964][ T25] usb 1-1: device descriptor read/64, error -71 [ 346.073903][ T25] usb usb1-port1: attempt power cycle [ 346.097627][ T29] audit: type=1400 audit(1732519416.993:910): avc: denied { write } for pid=5189 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.119946][ T29] audit: type=1400 audit(1732519416.993:911): avc: denied { remove_name } for pid=5189 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.172527][ T29] audit: type=1400 audit(1732519416.993:912): avc: denied { rename } for pid=5189 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 346.204535][ T29] audit: type=1400 audit(1732519416.993:913): avc: denied { add_name } for pid=5189 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.242960][ T29] audit: type=1400 audit(1732519416.993:914): avc: denied { unlink } for pid=5189 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 346.285233][ T29] audit: type=1400 audit(1732519416.993:915): avc: denied { create } for pid=5189 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 346.331974][ T8545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.344107][ T8545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.356251][ T8545] bond0 (unregistering): Released all slaves [ 346.385194][ T9] usb 3-1: USB disconnect, device number 49 [ 346.436514][ T25] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 346.493908][ T25] usb 1-1: device descriptor read/8, error -71 [ 346.740629][ T5832] Bluetooth: hci4: command tx timeout [ 346.763165][ T25] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 346.790475][ T25] usb 1-1: device descriptor read/8, error -71 [ 346.869273][T11423] netlink: 48 bytes leftover after parsing attributes in process `syz.6.759'. [ 346.905607][T11312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 346.913936][ T25] usb usb1-port1: unable to enumerate USB device [ 347.149944][ T5832] Bluetooth: hci3: command tx timeout [ 347.177381][T11312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.381128][T11312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.568771][ T8545] hsr_slave_0: left promiscuous mode [ 347.606303][ T8545] hsr_slave_1: left promiscuous mode [ 347.640033][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.670007][ T8545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.687111][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.707359][ T8545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.764979][ T8545] veth1_macvtap: left promiscuous mode [ 347.775627][ T8545] veth0_macvtap: left promiscuous mode [ 347.809803][ T8545] veth1_vlan: left promiscuous mode [ 347.819805][ T5929] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 347.830412][ T8545] veth0_vlan: left promiscuous mode [ 347.979799][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 347.995489][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.008125][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.022394][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.035458][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 348.048494][ T5929] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 348.058879][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.074528][ T5929] usb 1-1: config 0 descriptor?? [ 348.199928][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 348.208924][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 348.224585][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 348.236515][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 348.258793][ T9] usb 3-1: Product: syz [ 348.268884][ T9] usb 3-1: Manufacturer: syz [ 348.277610][ T9] usb 3-1: SerialNumber: syz [ 348.297429][ T9] usb 3-1: config 0 descriptor?? [ 348.307319][T11441] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 348.418216][ T8545] team0 (unregistering): Port device team_slave_1 removed [ 348.477259][ T8545] team0 (unregistering): Port device team_slave_0 removed [ 348.498557][ T5929] ryos 0003:1E7D:31CE.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.0-1/input0 [ 348.617111][ T5929] usb 3-1: USB disconnect, device number 50 [ 348.829770][ T5832] Bluetooth: hci4: command tx timeout [ 349.010413][T11312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.065670][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.099291][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.138896][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.160645][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.171706][T11393] chnl_net:caif_netlink_parms(): no params data found [ 349.234665][ T5832] Bluetooth: hci3: command tx timeout [ 349.307644][T11312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.094226][T11393] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.136423][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.154939][T11393] bridge_slave_0: entered allmulticast mode [ 350.165538][T11393] bridge_slave_0: entered promiscuous mode [ 350.194036][T11312] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.207080][T11393] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.217349][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.225801][T11393] bridge_slave_1: entered allmulticast mode [ 350.238453][T11393] bridge_slave_1: entered promiscuous mode [ 350.317300][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.324431][T11135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.393144][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.400276][T11135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.973871][ T5832] Bluetooth: hci4: command tx timeout [ 351.181755][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.421578][T11312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.472625][ T965] usb 1-1: USB disconnect, device number 76 [ 351.510688][T11312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.574693][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.642546][T11490] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.768'. [ 351.643962][T11489] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.767'. [ 351.652034][T11490] openvswitch: netlink: Message has 76 unknown bytes. [ 351.668419][T11489] openvswitch: netlink: Message has 76 unknown bytes. [ 351.724594][T11393] team0: Port device team_slave_0 added [ 351.795715][T11393] team0: Port device team_slave_1 added [ 351.976428][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.008139][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.174277][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.276099][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 352.276139][ T29] audit: type=1400 audit(1732519423.153:925): avc: denied { name_bind } for pid=11499 comm="syz.6.770" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 352.378651][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.462482][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.749737][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.761840][ T29] audit: type=1400 audit(1732519423.153:926): avc: denied { node_bind } for pid=11499 comm="syz.6.770" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 352.858451][T11312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.981807][T11312] veth0_vlan: entered promiscuous mode [ 353.011428][T11312] veth1_vlan: entered promiscuous mode [ 353.036241][ T29] audit: type=1400 audit(1732519423.933:927): avc: denied { ioctl } for pid=11507 comm="syz.6.771" path="socket:[46973]" dev="sockfs" ino=46973 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.068501][T11312] veth0_macvtap: entered promiscuous mode [ 353.096220][ T5832] Bluetooth: hci4: command tx timeout [ 353.098408][T11312] veth1_macvtap: entered promiscuous mode [ 353.211827][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.243806][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.258801][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.269876][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.280196][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.293335][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.304077][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.315003][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.329044][T11312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.349972][T11393] hsr_slave_0: entered promiscuous mode [ 353.356590][T11393] hsr_slave_1: entered promiscuous mode [ 353.381986][T11393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.397320][T11393] Cannot create hsr debugfs directory [ 353.412942][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.423861][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.433955][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.449696][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.540022][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.571492][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.581542][ T29] audit: type=1400 audit(1732519424.473:928): avc: denied { read write } for pid=11515 comm="syz.2.772" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 353.611417][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.638414][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.639733][ T29] audit: type=1400 audit(1732519424.473:929): avc: denied { open } for pid=11515 comm="syz.2.772" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 353.649354][T11312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.708048][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 353.737681][T11312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.752606][T11312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.762676][T11312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.771461][T11312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.804725][ T29] audit: type=1400 audit(1732519424.703:930): avc: denied { create } for pid=11528 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 354.148691][ T29] audit: type=1400 audit(1732519425.043:931): avc: denied { create } for pid=11539 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.187626][ T29] audit: type=1400 audit(1732519425.083:932): avc: denied { connect } for pid=11539 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.298384][T11546] xt_l2tp: invalid flags combination: 0 [ 354.299706][ T29] audit: type=1400 audit(1732519425.193:933): avc: denied { read } for pid=11539 comm="syz.2.775" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 354.327871][ T29] audit: type=1400 audit(1732519425.193:934): avc: denied { open } for pid=11539 comm="syz.2.775" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 354.371972][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.405274][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.549030][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.569136][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.672153][T11559] autofs: Unknown parameter './file1' [ 355.397257][T11393] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.426837][T11393] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.445512][T11393] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.480699][T11393] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.577572][T11393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.592473][T11393] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.302148][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.309237][ T8545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.387943][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.395086][ T8545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.604664][T11599] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 356.784801][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.904911][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.939268][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.977601][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.039964][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.057784][T11393] veth0_vlan: entered promiscuous mode [ 357.069988][T11393] veth1_vlan: entered promiscuous mode [ 357.125673][T11393] veth0_macvtap: entered promiscuous mode [ 357.154276][T11393] veth1_macvtap: entered promiscuous mode [ 357.181429][ T35] bridge_slave_1: left allmulticast mode [ 357.187097][ T35] bridge_slave_1: left promiscuous mode [ 357.194658][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.206856][ T35] bridge_slave_0: left allmulticast mode [ 357.213345][ T35] bridge_slave_0: left promiscuous mode [ 357.219038][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.629500][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.639533][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.649389][ T35] bond0 (unregistering): Released all slaves [ 357.665760][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.676622][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.686793][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.707594][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.717475][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.727987][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.737824][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.748777][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.758670][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.769180][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.789471][T11393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.810244][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.823085][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.833146][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.843616][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.854032][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.864790][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.874756][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.885251][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.895080][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.905537][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.916454][T11393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.951757][T11393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.960909][T11393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.971462][T11393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.980569][T11393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.146685][T11135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.184721][T11135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.231124][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.239040][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.274818][ T35] hsr_slave_0: left promiscuous mode [ 358.283241][ T35] hsr_slave_1: left promiscuous mode [ 358.289152][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.304027][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.312822][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.326487][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.347826][ T35] veth1_macvtap: left promiscuous mode [ 358.353441][ T35] veth0_macvtap: left promiscuous mode [ 358.358928][ T35] veth1_vlan: left promiscuous mode [ 358.364660][ T35] veth0_vlan: left promiscuous mode [ 359.391463][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.413047][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.424942][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.451785][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.461286][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.469949][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.173200][ T35] team0 (unregistering): Port device team_slave_1 removed [ 360.208030][ T35] team0 (unregistering): Port device team_slave_0 removed [ 360.271993][ T25] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 360.434243][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 360.442616][ T25] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 360.458532][ T25] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.468772][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 360.475529][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 360.484935][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.505307][ T25] usb 1-1: config 0 descriptor?? [ 360.645766][T11669] lo speed is unknown, defaulting to 1000 [ 360.737721][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 360.737737][ T29] audit: type=1400 audit(2000000004.240:957): avc: denied { read } for pid=11681 comm="syz.2.792" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 360.785843][ T29] audit: type=1400 audit(2000000004.280:958): avc: denied { open } for pid=11681 comm="syz.2.792" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 360.812653][ T29] audit: type=1400 audit(2000000004.320:959): avc: denied { create } for pid=11681 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.846216][ T29] audit: type=1400 audit(2000000004.320:960): avc: denied { ioctl } for pid=11681 comm="syz.2.792" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 360.872661][ T29] audit: type=1400 audit(2000000004.320:961): avc: denied { setopt } for pid=11681 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.893340][ T29] audit: type=1400 audit(2000000004.320:962): avc: denied { bind } for pid=11681 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.922652][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.938881][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.958336][ T25] wacom 0003:056A:00C4.0017: unknown main item tag 0x0 [ 360.965911][ T29] audit: type=1400 audit(2000000004.340:963): avc: denied { accept } for pid=11681 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 361.001419][ T25] wacom 0003:056A:00C4.0017: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.0-1/input0 [ 361.048917][ T29] audit: type=1400 audit(2000000004.340:964): avc: denied { write } for pid=11681 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 361.077783][ T29] audit: type=1400 audit(2000000004.340:965): avc: denied { read } for pid=11681 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 361.620400][ T5832] Bluetooth: hci3: command tx timeout [ 361.651450][ T5910] usb 1-1: USB disconnect, device number 77 [ 361.736835][T11669] chnl_net:caif_netlink_parms(): no params data found [ 361.826110][T11710] overlayfs: missing 'lowerdir' [ 361.936860][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.944111][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.951600][T11669] bridge_slave_0: entered allmulticast mode [ 361.958186][T11669] bridge_slave_0: entered promiscuous mode [ 361.976962][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.984146][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.991638][T11669] bridge_slave_1: entered allmulticast mode [ 361.998740][T11669] bridge_slave_1: entered promiscuous mode [ 362.040307][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.064364][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.075033][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.114776][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.132053][T11669] team0: Port device team_slave_0 added [ 362.141228][T11669] team0: Port device team_slave_1 added [ 362.178899][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.228966][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.238337][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.265611][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.296682][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.319490][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.328227][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.364188][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.445990][T11669] hsr_slave_0: entered promiscuous mode [ 362.453880][T11669] hsr_slave_1: entered promiscuous mode [ 362.519007][ T35] bridge_slave_1: left allmulticast mode [ 362.525825][ T35] bridge_slave_1: left promiscuous mode [ 362.533115][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.541889][ T35] bridge_slave_0: left allmulticast mode [ 362.547528][ T35] bridge_slave_0: left promiscuous mode [ 362.553460][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.853448][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.864062][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.874608][ T35] bond0 (unregistering): Released all slaves [ 363.269233][ T35] hsr_slave_0: left promiscuous mode [ 363.288923][ T35] hsr_slave_1: left promiscuous mode [ 363.307982][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.315703][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.326357][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.334455][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.348516][ T35] veth1_macvtap: left promiscuous mode [ 363.354940][ T35] veth0_macvtap: left promiscuous mode [ 363.360555][ T35] veth1_vlan: left promiscuous mode [ 363.365788][ T35] veth0_vlan: left promiscuous mode [ 363.678059][T11753] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 363.700891][ T5832] Bluetooth: hci3: command tx timeout [ 363.870548][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.883087][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.895331][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.917005][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.940508][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 363.953572][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.027336][ T35] team0 (unregistering): Port device team_slave_1 removed [ 364.073080][T11759] trusted_key: encrypted_key: key trusted:syz not found [ 364.074347][ T29] audit: type=1400 audit(2000000007.580:966): avc: denied { write } for pid=11757 comm="syz.6.798" name="unix" dev="proc" ino=4026533328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 364.109162][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.125488][ T35] team0 (unregistering): Port device team_slave_0 removed [ 364.489970][ T8] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 364.651800][T11755] lo speed is unknown, defaulting to 1000 [ 364.690531][ T8] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=ba.c5 [ 364.707848][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.716773][ T8] usb 1-1: Product: syz [ 364.721271][ T8] usb 1-1: Manufacturer: syz [ 364.726459][ T8] usb 1-1: SerialNumber: syz [ 364.791116][ T8] usb 1-1: config 0 descriptor?? [ 364.829873][ T8] comedi comedi0: Wrong number of endpoints [ 364.849056][ T8] ni6501 1-1:0.0: driver 'ni6501' failed to auto-configure device. [ 364.966081][T11669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.043421][T11669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.073285][ T25] usb 1-1: USB disconnect, device number 78 [ 365.092995][T11669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.113326][T11669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.266593][T11775] netlink: 134744 bytes leftover after parsing attributes in process `syz.6.803'. [ 365.276152][T11775] openvswitch: netlink: Message has 76 unknown bytes. [ 365.615102][T11755] chnl_net:caif_netlink_parms(): no params data found [ 365.730039][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.737278][T11755] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.745086][T11755] bridge_slave_0: entered allmulticast mode [ 365.758503][T11755] bridge_slave_0: entered promiscuous mode [ 365.779843][ T53] Bluetooth: hci3: command tx timeout [ 365.780327][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.796103][T11755] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.807851][T11755] bridge_slave_1: entered allmulticast mode [ 365.849006][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 365.849017][ T29] audit: type=1400 audit(2000000009.350:978): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 365.880575][T11755] bridge_slave_1: entered promiscuous mode [ 365.916873][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.951195][T11755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.973782][T11755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.017567][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.024685][ T53] Bluetooth: hci4: command tx timeout [ 366.052788][T11755] team0: Port device team_slave_0 added [ 366.090362][T11755] team0: Port device team_slave_1 added [ 366.142093][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.149159][T11135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.163102][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.170284][T11135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.244466][T11669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.272413][T11755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.281654][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.313834][T11755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.335993][T11755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.351195][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.382844][T11755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.536131][T11755] hsr_slave_0: entered promiscuous mode [ 366.759784][ T29] audit: type=1400 audit(2000000010.110:979): avc: denied { ioctl } for pid=11795 comm="syz.2.810" path="socket:[49367]" dev="sockfs" ino=49367 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 367.060983][T11755] hsr_slave_1: entered promiscuous mode [ 367.068066][T11755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.077771][T11755] Cannot create hsr debugfs directory [ 367.267050][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.292058][T11669] veth0_vlan: entered promiscuous mode [ 367.312419][T11669] veth1_vlan: entered promiscuous mode [ 367.531340][T11669] veth0_macvtap: entered promiscuous mode [ 367.549357][T11669] veth1_macvtap: entered promiscuous mode [ 367.598882][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.617549][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.634337][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.667213][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.677546][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.695094][T11810] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 367.704034][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.720289][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.737906][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.748955][T11669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.766567][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.785807][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.796702][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.810471][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.820788][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.831463][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.842695][T11669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.853346][T11669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.859804][ T53] Bluetooth: hci3: command tx timeout [ 367.875477][T11669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.900922][T11669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.932168][T11669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.956199][T11669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.975492][T11669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.102905][ T53] Bluetooth: hci4: command tx timeout [ 368.182655][T11755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.227354][T11755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.244723][T11755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.255787][T11755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.324719][ T8545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.337355][ T8545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.367818][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.376608][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.385410][T11755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.405735][T11755] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.430108][ T5910] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 368.438660][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.445725][ T8545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.476182][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.483300][ T8545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.620860][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 368.630910][ T5910] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 368.647589][ T5910] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.665248][T11755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.682338][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 368.698859][ T5910] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 368.720364][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.735842][T11755] veth0_vlan: entered promiscuous mode [ 368.743825][ T5910] usb 1-1: config 0 descriptor?? [ 368.839968][T11821] netlink: 134744 bytes leftover after parsing attributes in process `syz.6.815'. [ 368.849255][T11821] openvswitch: netlink: Message has 76 unknown bytes. [ 369.062260][T11755] veth1_vlan: entered promiscuous mode [ 369.080922][T11755] veth0_macvtap: entered promiscuous mode [ 369.088754][T11755] veth1_macvtap: entered promiscuous mode [ 369.111663][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.135043][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.178160][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.188822][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.198912][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.209407][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.219522][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.230415][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.240658][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.251238][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.262154][T11755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.272441][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.283181][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.293313][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.304153][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.314029][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.324570][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.334465][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.344970][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.354847][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.399570][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.410927][T11755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.437315][T11755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.446152][T11755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.454920][T11755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.463798][T11755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.466895][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.535255][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.550113][ T29] audit: type=1400 audit(2000000013.050:980): avc: denied { create } for pid=11822 comm="syz.6.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 369.579929][ T8] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 369.637731][ T5910] wacom 0003:056A:00C4.0018: unknown main item tag 0x0 [ 369.668398][ T6104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.680996][ T5910] wacom 0003:056A:00C4.0018: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.0-1/input0 [ 369.715531][ T6861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.730012][ T6861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.759946][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 369.782700][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 369.822671][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.831033][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.838885][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.840549][ T8] usb 3-1: Product: syz [ 369.888926][ T8] usb 3-1: Manufacturer: syz [ 369.912804][ T8] usb 3-1: SerialNumber: syz [ 370.190376][ T53] Bluetooth: hci4: command tx timeout [ 370.307046][ T6104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.339741][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 370.346028][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 370.443177][ T9] usb 1-1: USB disconnect, device number 79 [ 370.495615][ T6104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.611539][ T6104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.736105][ T6104] bridge_slave_1: left allmulticast mode [ 370.749461][ T6104] bridge_slave_1: left promiscuous mode [ 370.761813][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.774697][ T6104] bridge_slave_0: left allmulticast mode [ 370.782177][ T6104] bridge_slave_0: left promiscuous mode [ 370.787887][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.904408][ T29] audit: type=1400 audit(2000000014.410:981): avc: denied { mounton } for pid=11823 comm="syz.2.817" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.904426][T11861] binder: Bad value for 'max' [ 371.246359][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.258196][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.272215][ T6104] bond0 (unregistering): Released all slaves [ 371.374857][ T5833] r8152-cfgselector 3-1: USB disconnect, device number 51 [ 371.577273][ T6104] hsr_slave_0: left promiscuous mode [ 371.583455][ T6104] hsr_slave_1: left promiscuous mode [ 371.589189][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.596666][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.604266][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.613243][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.627652][ T6104] veth1_macvtap: left promiscuous mode [ 371.633636][ T6104] veth0_macvtap: left promiscuous mode [ 371.639140][ T6104] veth1_vlan: left promiscuous mode [ 371.644780][ T6104] veth0_vlan: left promiscuous mode [ 372.058754][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.069368][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.079822][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.094229][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.112917][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 372.122206][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.373925][ T6104] team0 (unregistering): Port device team_slave_1 removed [ 372.418028][ T6104] team0 (unregistering): Port device team_slave_0 removed [ 372.764184][T11894] lo speed is unknown, defaulting to 1000 [ 372.993060][T11894] chnl_net:caif_netlink_parms(): no params data found [ 373.088057][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.097266][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.105055][T11894] bridge_slave_0: entered allmulticast mode [ 373.111911][T11894] bridge_slave_0: entered promiscuous mode [ 373.121874][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.133666][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.143363][T11894] bridge_slave_1: entered allmulticast mode [ 373.153891][T11894] bridge_slave_1: entered promiscuous mode [ 373.207869][ T6104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.240419][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.251569][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.278396][T11894] team0: Port device team_slave_0 added [ 373.295369][ T6104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.316776][T11894] team0: Port device team_slave_1 added [ 373.334561][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.342048][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.367956][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.374872][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.404088][ T6104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.418099][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.425316][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.451198][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.457917][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.500198][ T6104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.528462][T11894] hsr_slave_0: entered promiscuous mode [ 373.539017][T11894] hsr_slave_1: entered promiscuous mode [ 373.694055][ T6104] bridge_slave_1: left allmulticast mode [ 373.702350][ T6104] bridge_slave_1: left promiscuous mode [ 373.708054][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.723561][ T6104] bridge_slave_0: left allmulticast mode [ 373.729238][ T6104] bridge_slave_0: left promiscuous mode [ 373.738719][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.190150][ T53] Bluetooth: hci3: command tx timeout [ 374.573698][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.586668][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.596503][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.605477][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.620288][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 374.629296][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.926107][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.940001][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.955193][ T6104] bond0 (unregistering): Released all slaves [ 375.163252][T11943] lo speed is unknown, defaulting to 1000 [ 375.470751][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 375.644942][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.655950][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.674849][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.697838][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.720628][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.748618][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.774682][ T9] usb 3-1: Product: syz [ 375.784152][ T9] usb 3-1: Manufacturer: syz [ 375.807366][ T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 375.824210][ T6104] hsr_slave_0: left promiscuous mode [ 375.845185][ T6104] hsr_slave_1: left promiscuous mode [ 375.852967][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.863852][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.874497][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.882259][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.951349][ T6104] veth1_macvtap: left promiscuous mode [ 375.975943][ T6104] veth0_macvtap: left promiscuous mode [ 376.008987][ T6104] veth1_vlan: left promiscuous mode [ 376.035321][ T9] usb 3-1: USB disconnect, device number 52 [ 376.074739][ T6104] veth0_vlan: left promiscuous mode [ 376.241539][ T29] audit: type=1400 audit(2000000019.750:982): avc: denied { create } for pid=11950 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 376.261312][ T53] Bluetooth: hci3: command tx timeout [ 376.268537][ T29] audit: type=1400 audit(2000000019.770:983): avc: denied { bind } for pid=11950 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 376.524429][T11968] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 376.664115][ T5832] Bluetooth: hci4: command tx timeout [ 376.758225][ T6104] team0 (unregistering): Port device team_slave_1 removed [ 376.799215][ T6104] team0 (unregistering): Port device team_slave_0 removed [ 377.256160][ T29] audit: type=1400 audit(2000000020.760:984): avc: denied { read write } for pid=11977 comm="syz.2.828" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.350672][T11983] overlayfs: missing 'lowerdir' [ 377.365515][ T29] audit: type=1400 audit(2000000020.790:985): avc: denied { open } for pid=11977 comm="syz.2.828" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.485037][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.828'. [ 377.762475][ T29] audit: type=1400 audit(2000000021.270:986): avc: denied { read } for pid=11990 comm="syz.0.833" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 377.785548][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.800749][ T29] audit: type=1400 audit(2000000021.270:987): avc: denied { open } for pid=11990 comm="syz.0.833" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 377.830609][ T29] audit: type=1400 audit(2000000021.270:988): avc: denied { ioctl } for pid=11990 comm="syz.0.833" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 377.855567][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.874804][T11993] Cannot find del_set index 1 as target [ 377.909866][ T29] audit: type=1400 audit(2000000021.270:989): avc: denied { create } for pid=11990 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.909922][ T8] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 377.934584][ T29] audit: type=1400 audit(2000000021.370:990): avc: denied { setopt } for pid=11990 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.129832][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 378.147380][ T8] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 378.192035][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.225047][ T8] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.244139][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 378.259754][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 378.268822][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.348227][ T29] audit: type=1400 audit(2000000021.850:991): avc: denied { bind } for pid=11996 comm="syz.6.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 378.367607][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.374716][ T53] Bluetooth: hci3: command tx timeout [ 378.412750][T11998] lo speed is unknown, defaulting to 1000 [ 378.529073][T11894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.557797][T11894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.602993][T11894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.623566][ T8] usb 3-1: config 0 descriptor?? [ 378.717808][T11894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.739896][ T53] Bluetooth: hci4: command tx timeout [ 378.858463][T11943] chnl_net:caif_netlink_parms(): no params data found [ 379.035316][T11894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.057146][T11894] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.080126][T11989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.085912][T11894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.088654][T11989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.098863][T11894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.129198][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.136343][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.154306][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.161446][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.240088][ T8] wacom 0003:056A:00C4.0019: unknown main item tag 0x0 [ 379.248462][ T8] wacom 0003:056A:00C4.0019: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.2-1/input0 [ 379.334097][T11943] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.353457][T11943] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.373644][T11943] bridge_slave_0: entered allmulticast mode [ 379.391052][T11943] bridge_slave_0: entered promiscuous mode [ 379.409211][T11943] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.432417][T11943] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.460279][T11943] bridge_slave_1: entered allmulticast mode [ 379.480912][T11943] bridge_slave_1: entered promiscuous mode [ 379.511702][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.532099][T11943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.556218][T11943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.938340][T11943] team0: Port device team_slave_0 added [ 379.950186][T11894] veth0_vlan: entered promiscuous mode [ 379.970471][ T8] usb 3-1: USB disconnect, device number 53 [ 380.004053][T11943] team0: Port device team_slave_1 added [ 380.020349][T11894] veth1_vlan: entered promiscuous mode [ 380.041259][T11943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.048520][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.074390][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.082131][T11943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.101310][T11943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.118518][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.152755][T11943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.241729][T11943] hsr_slave_0: entered promiscuous mode [ 380.257265][T11943] hsr_slave_1: entered promiscuous mode [ 380.271773][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 380.287733][T11943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.309718][T11943] Cannot create hsr debugfs directory [ 380.321835][T11894] veth0_macvtap: entered promiscuous mode [ 380.412630][T11894] veth1_macvtap: entered promiscuous mode [ 380.421087][ T5832] Bluetooth: hci3: command tx timeout [ 380.465680][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.499636][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.529225][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.565226][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.590867][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.607551][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.618466][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.634043][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.647188][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.708886][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.723860][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.736173][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.761639][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.772403][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.783163][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.793003][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.803505][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.809740][ T5833] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 380.814202][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.820998][ T5832] Bluetooth: hci4: command tx timeout [ 380.843899][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 380.848462][T11894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.861642][T11894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.870482][T11894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.879271][T11894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.992012][ T5833] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.009903][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 381.010472][ T5833] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.034949][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 381.040093][ T5833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.050605][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 381.069349][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 381.074414][ T5833] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.078663][ T9] usb 1-1: Product: syz [ 381.100471][ T9] usb 1-1: Manufacturer: syz [ 381.107586][ T9] usb 1-1: SerialNumber: syz [ 381.123731][ T5833] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.136346][ T9] usb 1-1: config 0 descriptor?? [ 381.140730][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.150138][ T5833] usb 3-1: Product: syz [ 381.154574][ T5833] usb 3-1: Manufacturer: syz [ 381.161398][ T7734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.173985][ T5833] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 381.176770][T12029] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 381.198453][ T7734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.294633][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.343792][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.475442][ T9] usb 3-1: USB disconnect, device number 54 [ 381.492819][ T5833] usb 1-1: USB disconnect, device number 80 [ 381.594685][T11943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.809682][T11943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.843333][T11943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.858219][T11943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.026986][T11943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.042566][T11943] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.088519][T11943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.099324][T11943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.115877][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.123037][ T7734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.132353][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.139475][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.354240][T11943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.425867][T11943] veth0_vlan: entered promiscuous mode [ 382.449564][T11943] veth1_vlan: entered promiscuous mode [ 382.489275][T11943] veth0_macvtap: entered promiscuous mode [ 382.530969][T11943] veth1_macvtap: entered promiscuous mode [ 382.551300][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.567784][ T46] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 382.575272][T12093] overlayfs: missing 'lowerdir' [ 382.619840][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.639755][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.655214][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.668915][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.700122][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.725093][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.739710][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 382.747694][ T46] usb 1-1: config 0 interface 0 altsetting 167 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.759703][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.766364][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 382.789704][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.809643][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.829652][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.842313][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.853931][T11943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.870588][ T46] usb 1-1: config 0 descriptor?? [ 382.899929][ T5832] Bluetooth: hci4: command tx timeout [ 382.972059][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.010810][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.023548][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.038395][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.048900][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.066124][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.077314][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.087199][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.098374][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.119828][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.132194][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.148676][T11943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.180844][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.198090][T11943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.208866][T11943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.229765][T11943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.238541][T11943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.289228][ T46] logitech 0003:046D:C101.001A: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.0-1/input0 [ 383.308472][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.391194][ T6104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.399067][ T6104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.437816][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.482165][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.491423][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.663307][ T65] bridge_slave_1: left allmulticast mode [ 383.673168][ T65] bridge_slave_1: left promiscuous mode [ 383.683407][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.692887][ T65] bridge_slave_0: left allmulticast mode [ 383.700555][T12083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.703793][ T65] bridge_slave_0: left promiscuous mode [ 383.709060][T12083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.717216][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.755424][ T29] audit: type=1400 audit(2000000027.260:992): avc: denied { write } for pid=12082 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 383.797475][T12083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.811932][T12083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.845370][ T5833] usb 1-1: USB disconnect, device number 81 [ 384.184792][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.207749][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.228947][ T65] bond0 (unregistering): Released all slaves [ 384.557804][ T65] hsr_slave_0: left promiscuous mode [ 384.567137][ T65] hsr_slave_1: left promiscuous mode [ 384.578039][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.588970][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.601091][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.608510][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.634802][ T65] veth1_macvtap: left promiscuous mode [ 384.640774][ T65] veth0_macvtap: left promiscuous mode [ 384.646731][ T65] veth1_vlan: left promiscuous mode [ 384.653300][ T65] veth0_vlan: left promiscuous mode [ 384.808528][ T29] audit: type=1400 audit(2000000028.300:993): avc: denied { create } for pid=12178 comm="syz.6.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 386.129654][ T29] audit: type=1400 audit(2000000028.320:994): avc: denied { read } for pid=12178 comm="syz.6.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 386.148852][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.778629][T12198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.811039][ T29] audit: type=1400 audit(2000000028.320:995): avc: denied { bind } for pid=12178 comm="syz.6.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.142075][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.154423][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.174588][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.224099][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.226242][T12213] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 387.250624][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.258527][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.285995][T12210] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 388.432121][ T65] team0 (unregistering): Port device team_slave_1 removed [ 389.391128][ T5832] Bluetooth: hci3: command tx timeout [ 389.514332][ T65] team0 (unregistering): Port device team_slave_0 removed [ 391.503824][ T5832] Bluetooth: hci3: command tx timeout [ 391.715301][T12207] lo speed is unknown, defaulting to 1000 [ 391.990842][ T29] audit: type=1400 audit(2000000035.300:996): avc: denied { ioctl } for pid=12264 comm="syz.0.860" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 392.102635][T12269] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 393.021632][T12207] chnl_net:caif_netlink_parms(): no params data found [ 393.208988][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.226700][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.234220][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.243744][T12207] bridge_slave_0: entered allmulticast mode [ 393.251209][T12207] bridge_slave_0: entered promiscuous mode [ 393.286410][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.303006][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.310838][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.317956][T12207] bridge_slave_1: entered allmulticast mode [ 393.324837][T12207] bridge_slave_1: entered promiscuous mode [ 393.373693][T12207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.399003][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.414385][T12207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.440893][T12207] team0: Port device team_slave_0 added [ 393.448893][T12207] team0: Port device team_slave_1 added [ 393.479112][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.495563][T12207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.502754][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.529722][T12207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.541599][ T5832] Bluetooth: hci3: command tx timeout [ 393.541688][ T30] INFO: task syz.5.561:9455 blocked for more than 143 seconds. [ 393.555722][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 393.556674][T12207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.570323][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.575204][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.606739][T12207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.628758][ T30] task:syz.5.561 state:D stack:25296 pid:9455 tgid:9455 ppid:6074 flags:0x00004006 [ 393.643699][ T30] Call Trace: [ 393.647264][ T30] [ 393.650458][ T30] __schedule+0xe58/0x5ad0 [ 393.654868][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 393.660612][ T30] ? __pfx___schedule+0x10/0x10 [ 393.665474][ T30] ? schedule+0x298/0x350 [ 393.669975][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.675021][ T30] ? lock_acquire+0x2f/0xb0 [ 393.679501][ T30] ? schedule+0x1fd/0x350 [ 393.683879][ T30] schedule+0xe7/0x350 [ 393.687952][ T30] request_wait_answer+0x4f8/0x900 [ 393.693102][ T30] ? __pfx_request_wait_answer+0x10/0x10 [ 393.698734][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 393.704565][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 393.711096][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 393.716316][ T30] ? _raw_spin_unlock+0x28/0x50 [ 393.724511][ T30] ? fuse_dev_queue_req+0x223/0x310 [ 393.729746][ T30] __fuse_simple_request+0x32d/0xcb0 [ 393.735046][ T30] fuse_flush+0x4ea/0x6d0 [ 393.739356][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 393.744322][ T30] ? __pfx_lock_release+0x10/0x10 [ 393.750149][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 393.754993][ T30] filp_flush+0xf0/0x1a0 [ 393.759535][ T30] filp_close+0x1c/0x30 [ 393.763729][ T30] __do_sys_close_range+0x380/0x700 [ 393.768939][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 393.774824][ T30] do_syscall_64+0xcd/0x250 [ 393.779323][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.785254][ T30] RIP: 0033:0x7f1be0b7e819 [ 393.789722][ T30] RSP: 002b:00007ffd026fbd58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 393.798141][ T30] RAX: ffffffffffffffda RBX: 00007f1be0d37ba0 RCX: 00007f1be0b7e819 [ 393.806176][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 393.814169][ T30] RBP: 00007f1be0d37ba0 R08: 0000000000000210 R09: 00007ffd026fc04f [ 393.822172][ T30] R10: 00007f1be0d37ac0 R11: 0000000000000246 R12: 000000000003b209 [ 393.830202][ T30] R13: 00007f1be0d36160 R14: 0000000000000032 R15: ffffffffffffffff [ 393.838193][ T30] [ 393.841453][ T30] [ 393.841453][ T30] Showing all locks held in the system: [ 393.857423][ T30] 1 lock held by khungtaskd/30: [ 393.865194][ T30] #0: ffffffff8e1bba80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 393.875288][ T30] 6 locks held by kworker/u8:4/65: [ 393.880587][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 393.891009][ T30] #1: ffffc9000215fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 393.900984][ T30] #2: ffffffff8fec7410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xb40 [ 393.910397][ T30] #3: ffff88805d96f0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 393.920448][ T30] #4: ffff88805d96a250 (&devlink->lock_key#41){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 393.931349][ T30] #5: ffffffff8fedd288 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 393.941400][ T30] 2 locks held by kworker/u8:6/1004: [ 393.946672][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 393.956871][ T30] #1: ffff8880b8628a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 393.968690][ T30] 1 lock held by dhcpcd/5501: [ 393.973447][ T30] #0: ffffffff8fedd288 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d0/0x1c50 [ 393.982548][ T30] 2 locks held by getty/5592: [ 393.987196][ T30] #0: ffff8880328de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 393.997067][ T30] #1: ffffc90002fc62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 394.007227][ T30] 3 locks held by kworker/0:6/5929: [ 394.012444][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 394.022967][ T30] #1: ffffc90004077d80 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 394.033489][ T30] #2: ffffffff8e1c7280 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 394.043458][ T30] 3 locks held by syz-executor/12207: [ 394.048811][ T30] #0: ffffffff8f29a600 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x10f/0x2c0 [ 394.058662][ T30] #1: ffffffff8fedd288 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d0/0x1c50 [ 394.067997][ T30] #2: ffffffff8e1c73b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 394.078122][ T30] [ 394.081209][ T30] ============================================= [ 394.081209][ T30] [ 394.089707][ T30] NMI backtrace for cpu 1 [ 394.094030][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 394.094549][T12207] hsr_slave_0: entered promiscuous mode [ 394.104184][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.104197][ T30] Call Trace: [ 394.104203][ T30] [ 394.104211][ T30] dump_stack_lvl+0x116/0x1f0 [ 394.104241][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 394.104264][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.104283][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 394.104307][ T30] watchdog+0xf0c/0x1240 [ 394.151771][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.156443][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.161646][ T30] ? __kthread_parkme+0x148/0x220 [ 394.166663][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.171326][ T30] kthread+0x2c1/0x3a0 [ 394.175386][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.180570][ T30] ? __pfx_kthread+0x10/0x10 [ 394.185149][ T30] ret_from_fork+0x45/0x80 [ 394.189548][ T30] ? __pfx_kthread+0x10/0x10 [ 394.194142][ T30] ret_from_fork_asm+0x1a/0x30 [ 394.198902][ T30] [ 394.202612][ T30] Sending NMI from CPU 1 to CPUs 0: [ 394.207834][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 394.209133][T12207] hsr_slave_1: entered promiscuous mode [ 394.223342][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 394.230196][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 394.240346][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.250393][ T30] Call Trace: [ 394.253672][ T30] [ 394.256595][ T30] dump_stack_lvl+0x3d/0x1f0 [ 394.261174][ T30] panic+0x71d/0x800 [ 394.265052][ T30] ? __pfx_panic+0x10/0x10 [ 394.269443][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 394.274795][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.280761][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 394.286121][ T30] ? watchdog+0xd76/0x1240 [ 394.290523][ T30] ? watchdog+0xd69/0x1240 [ 394.294932][ T30] watchdog+0xd87/0x1240 [ 394.299168][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.303819][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.309082][ T30] ? __kthread_parkme+0x148/0x220 [ 394.314092][ T30] ? __pfx_watchdog+0x10/0x10 [ 394.318763][ T30] kthread+0x2c1/0x3a0 [ 394.322810][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.327997][ T30] ? __pfx_kthread+0x10/0x10 [ 394.332569][ T30] ret_from_fork+0x45/0x80 [ 394.336969][ T30] ? __pfx_kthread+0x10/0x10 [ 394.341546][ T30] ret_from_fork_asm+0x1a/0x30 [ 394.346308][ T30] [ 394.349512][ T30] Kernel Offset: disabled [ 394.353813][ T30] Rebooting in 86400 seconds..