last executing test programs: 25m5.944317058s ago: executing program 32 (id=451): openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x2, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 14m28.05021988s ago: executing program 33 (id=2149): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x7f, 0x1000}], 0x1, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40800) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="fd218d0000008d112b1b2b9e5f3177e12170b73b9bb70130d332917d0cef35b511a3ab34fb2023236f27d054be4a1f040a436972a9f33deff47779eb873093c0f8bb6d2dd96a51a6b31e0732632122b9f411fcd42afd68015dde25aa8befe145077f16b5dde6d0fd3d030559b172428e1c40169de2de11229ff2d97eb7246f7b98988b184a52f1347e2774be8f4c3f068a48ef87569479b0fb287246f142a92d25927b969d91db7afc04f150c260a83789918785aa3387cb1fd932e2a4f9558716ad56bab135db757f8d1ae57c8faf6d435965b135431ea4d2acd28f234e82e7a00af47e4c33d4dd0699e7427a246fed8290d8d4ba"], &(0x7f0000000100)=ANY=[@ANYBLOB="0003120000000203"], 0x0, 0x0}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x14, 0x62, "77df80f69fd59041d653cde60251562741ac114738b1b3114881c49be2fa499d1a0cd55274803477baf00d86f0a4b7b1c120511824d11b721edf324373ec9c6ac321d5b814fd8df2d921deedbbf77328506612527b33e6472355a7c3d4e413ff1627"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x2f, "6243c01ada2df7e875574100edb128f5631f5764fa334576d0dac789520465d1119e8893e60b7b8fb5941467a67a22"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x1, 0x6db, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x8e, 0x1c, 0x40, 0x586, 0x3417, 0x8e71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c9, 0x2, 0x57, 0x6, 0x80, 0x2, [{{0x9, 0x4, 0xdd, 0xd4, 0xa, 0xf3, 0x82, 0x4, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xa}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x3145, 0xff, 'sd'}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x60, 0x4, 0x1def6a20420b2795}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7, 0x8, "", "4e6410"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x8, 0x7, "d608", "d3a9"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0x2a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x23}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3bf, 0xc0, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x125a}, @generic={0xaa, 0x21, "4cd31cc371ad9e4e898488794e4116cb42b53ab3aad11073dbd5763221ac16751901238f9e04ac9fc65644f19d4f693067f0f340d50c3b07d94e233a62e8d24ac057478dcf7aa8a0af6970917e2dbef8436f9a1c03afa694ed0949e9dce7cdaf39677a7d1f182adda801b753191873044d953657a0ea6aa5a29af6f5f7526eecb2e4c0da6d879f05c09880ef5c810b11b8c2fe5b0394ef9c7195ec56ec9cf7531e641999f92f28f3"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}, @generic={0x87, 0x6, "d9b8df25815636ad745470889fa4e4bef5d38a08146236efdf9c1162c21521359a3dbd081ed5b3bcd1036029b3c7a5abda570aa66fa2dd02c2a420628c2572890de6120d1af3f25fa16058139fd93d6c9c01a7a5d1937aa27af953d45225cb656e9d9d8dd8a9dfca1d88e62d4ac9434d322962fd6a635649c8e0dfc03b35a5440689d3d8ce"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x6, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x7, 0x4, [@generic={0x97, 0xd, "6ba56e8085c245529bf0eacb9b318eaff91b45ccdab7b86d4e4ba808ad020bb359b16c474ffc926e3f3d78ee963b5b33dd8583b69faaf614656ac0b34c94194a1bcaf6f98bb1e659ee005b488e2a8f87b93ec15686b63f1118bddcfd13d0ebbdcb555d64dded827c19a436cde1cc9bed84a55bb34637abc062ad5c8bda3e456beb9fc0f4ba9fec0a2697e25f6f5d3c2a4c62998025"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x4, 0x2, 0x5c, [@generic={0xd2, 0x21, "2a955d3164cd7be5765306e151b02a668b518c5f89be29cc7fd814ee99c8e2447e970fa1db28365899dce14f4d3d9abfa9578eaafbff26c47be095087143ce445bcac052ee0ac573ea22d08b8024119d878b89e61eaf82db36ecad44bb89c2350ded7a41c67cb9420522b3a766f1d5c8c9c820d8e0b3b510048560c200df04759518d901e1fdcdd37b7b090d97a9f825442d3bec99dae29bba537a96c29e1ced5b5fdd7ec6001da694adf37d0a5d753156d52d3bc46a5f7c0b9d281475e9ec836f3c556ce7aaa15c95a844b5e4c65a7d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xd9, 0x51}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3950b65d9efe2162, 0x4, 0x37, 0xc1, [@generic={0x8f, 0x3d, "ef1cc3a9be5473ce86eedeb2d112cc10de8df208e1f969429c9137e8df48c538ff3ead75caf0b893137eaab376606dc36109b83ee73c60572b891589963b3defd6e78c34e2c9ecf27c47c7be8c62b60baf0fbb3470c454af739d55c8a2a7e374773ffbd740030b8e52c72359a8603df756a4c73ba152faf929acff0a7831ad8dbb33b06dc8eda2b43483ab3c04"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfce2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x1, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x4, 0x23, 0x6, [@generic={0x23, 0x31, "cfbd0bfc2470982497c79be906c17e1ad2dd266e70b2fbec6c899bc6928f90c2af"}, @generic={0xae, 0x6, "562ef54c1bdc1d756690045796ff3aed32004719f253b1dcf313b912b126fbe68ff68ef2a29babca9dabc7dfbb99f4c88aed88bb79561221b343ddc9dee40c2f784409a7517db52f36e3c4fe54fc5308d247823e31f0d9ff7d51598e4815dac2b5e5e0721f58ce24b8d7ebac397f6f9756c3eafeed143da597af8cbe3191da8b2a40bd6ac9eb86e1b63eca83d049ab939cf4333856e8e70322852616cb9dc02172e65bdcb9eca42d2151241d"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x13068caf2ff2cb7b, 0x3, 0x4, 0xa, [@generic={0x9b, 0xd, "709712b07cd8fd9fe205f3724e467f9e034a651ed8b3e5b36cb5db5b33109a5a85a70603f155ed6c207768856a235478556a4eca14cd1cabbd9815ba2da47766a93bb8633d33f13ce021b725917f58e76ce851835d96866cb358fa2901d51da4b6c9eec91c1f87cf1d1ef1d6b2026a7ac605b4de37ae928afee510cf0786873258dab56722bb786349c50ec3d6ccdf4e6695a5647e6b1d79b5"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x401}]}}]}}, {{0x9, 0x4, 0xab, 0xdc, 0x4, 0x8e, 0xec, 0x54, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "c6"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x97, 0x5, 0x400, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x6, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x8, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x8, 0x1, 0x1}]}, @hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xcb7}}], [{{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x7, 0x80, 0x9}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xff, 0xf, 0x4, [@generic={0xe0, 0x4, "6d1eae09abb33d9895d9af55121b6ccc193c9995ec7d71becf56a924b8cfb0f4541f5c646526322f9549643e4ea14bc3893e6ab54b9b52caa74a047058481aa5ad2af611111958f8ac5cd87555c44efb479d71a288787becb4fd49add4efc91231915e3455ad290d533ee2746f7151e02e84ea433f686b6abd2ef4aae09d821be564b1b76064be95a656a3c327645c541bb6166b824197d1edc1ddcb9e79a397f2fab908e046affd4730f0889e549187197a3f696614d252634b47e6a7e0c389b00d20b808970f1553003256b28c836269b930a958eb977bdc558f17cbc5"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xa, 0x7, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0xe, 0x0, [@generic={0x2, 0x18}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xc5, 0x1, 0x1, 0x40, 0x4}, 0x13, &(0x7f0000000140)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x4, 0x7, 0x5f, 0xd}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) 12m50.695945648s ago: executing program 34 (id=2360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = msgget$private(0x0, 0x90) msgsnd(r2, &(0x7f0000002000)={0x2, "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"}, 0x3b3, 0x800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)="0452", 0x2}], 0x1}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) sendmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r5, &(0x7f0000000fc0)=""/4096, 0x1000) socket$inet_icmp(0x2, 0x2, 0x1) 12m37.962300408s ago: executing program 35 (id=2379): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r1, 0x0, 0x0) 11m4.125406s ago: executing program 1 (id=2553): openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x8010, 0xffffffffffffffff, 0xa3bfe000) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x53, 0x3a, '\xd3-\'!!', 0x3a, '', 0x3a, './file/file0', 0x3a, [0x43, 0x4f]}, 0x33) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x101000) r3 = io_uring_setup(0x25f1, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x2, 0x257}) io_uring_enter(r3, 0x2000000, 0x2, 0xf, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) setreuid(0xee01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0) 11m2.034086246s ago: executing program 1 (id=2555): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000100)='jbd2_lock_buffer_stall\x00', r1, 0x0, 0x100000008}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) creat(&(0x7f0000000240)='./file0/file0\x00', 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x100}, 0x14}}, 0x4008004) r8 = memfd_create(&(0x7f0000001d80)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef\x98\x87\xb5p\xf7\xd7\xeb\xfb\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06', 0x7) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x800455ca, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r8, 0x0) 11m0.891670801s ago: executing program 1 (id=2559): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x11, 0x6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 10m57.791846432s ago: executing program 1 (id=2565): mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) pivot_root(&(0x7f00000000c0)='./control\x00', &(0x7f00000001c0)='./control\x00') r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x42000400) rmdir(&(0x7f0000000100)='./control\x00') 10m57.62834842s ago: executing program 1 (id=2566): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x7f, 0x1000}], 0x1, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40800) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="fd218d0000008d112b1b2b9e5f3177e12170b73b9bb70130d332917d0cef35b511a3ab34fb2023236f27d054be4a1f040a436972a9f33deff47779eb873093c0f8bb6d2dd96a51a6b31e0732632122b9f411fcd42afd68015dde25aa8befe145077f16b5dde6d0fd3d030559b172428e1c40169de2de11229ff2d97eb7246f7b98988b184a52f1347e2774be8f4c3f068a48ef87569479b0fb287246f142a92d25927b969d91db7afc04f150c260a83789918785aa3387cb1fd932e2a4f9558716ad56bab135db757f8d1ae57c8faf6d435965b135431ea4d2acd28f234e82e7a00af47e4c33d4dd0699e7427a246fed8290d8d4ba"], &(0x7f0000000100)=ANY=[@ANYBLOB="0003120000000203"], 0x0, 0x0}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x14, 0x62, "77df80f69fd59041d653cde60251562741ac114738b1b3114881c49be2fa499d1a0cd55274803477baf00d86f0a4b7b1c120511824d11b721edf324373ec9c6ac321d5b814fd8df2d921deedbbf77328506612527b33e6472355a7c3d4e413ff1627"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x2f, "6243c01ada2df7e875574100edb128f5631f5764fa334576d0dac789520465d1119e8893e60b7b8fb5941467a67a22"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x1, 0x6db, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x8e, 0x1c, 0x40, 0x586, 0x3417, 0x8e71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c9, 0x2, 0x57, 0x6, 0x80, 0x2, [{{0x9, 0x4, 0xdd, 0xd4, 0xa, 0xf3, 0x82, 0x4, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xa}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x3145, 0xff, 'sd'}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x60, 0x4, 0x1def6a20420b2795}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7, 0x8, "", "4e6410"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x8, 0x7, "d608", "d3a9"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0x2a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x23}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3bf, 0xc0, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x125a}, @generic={0xaa, 0x21, "4cd31cc371ad9e4e898488794e4116cb42b53ab3aad11073dbd5763221ac16751901238f9e04ac9fc65644f19d4f693067f0f340d50c3b07d94e233a62e8d24ac057478dcf7aa8a0af6970917e2dbef8436f9a1c03afa694ed0949e9dce7cdaf39677a7d1f182adda801b753191873044d953657a0ea6aa5a29af6f5f7526eecb2e4c0da6d879f05c09880ef5c810b11b8c2fe5b0394ef9c7195ec56ec9cf7531e641999f92f28f3"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}, @generic={0x87, 0x6, "d9b8df25815636ad745470889fa4e4bef5d38a08146236efdf9c1162c21521359a3dbd081ed5b3bcd1036029b3c7a5abda570aa66fa2dd02c2a420628c2572890de6120d1af3f25fa16058139fd93d6c9c01a7a5d1937aa27af953d45225cb656e9d9d8dd8a9dfca1d88e62d4ac9434d322962fd6a635649c8e0dfc03b35a5440689d3d8ce"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x6, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x7, 0x4, [@generic={0x97, 0xd, "6ba56e8085c245529bf0eacb9b318eaff91b45ccdab7b86d4e4ba808ad020bb359b16c474ffc926e3f3d78ee963b5b33dd8583b69faaf614656ac0b34c94194a1bcaf6f98bb1e659ee005b488e2a8f87b93ec15686b63f1118bddcfd13d0ebbdcb555d64dded827c19a436cde1cc9bed84a55bb34637abc062ad5c8bda3e456beb9fc0f4ba9fec0a2697e25f6f5d3c2a4c62998025"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x4, 0x2, 0x5c, [@generic={0xd2, 0x21, "2a955d3164cd7be5765306e151b02a668b518c5f89be29cc7fd814ee99c8e2447e970fa1db28365899dce14f4d3d9abfa9578eaafbff26c47be095087143ce445bcac052ee0ac573ea22d08b8024119d878b89e61eaf82db36ecad44bb89c2350ded7a41c67cb9420522b3a766f1d5c8c9c820d8e0b3b510048560c200df04759518d901e1fdcdd37b7b090d97a9f825442d3bec99dae29bba537a96c29e1ced5b5fdd7ec6001da694adf37d0a5d753156d52d3bc46a5f7c0b9d281475e9ec836f3c556ce7aaa15c95a844b5e4c65a7d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xd9, 0x51}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3950b65d9efe2162, 0x4, 0x37, 0xc1, [@generic={0x8f, 0x3d, "ef1cc3a9be5473ce86eedeb2d112cc10de8df208e1f969429c9137e8df48c538ff3ead75caf0b893137eaab376606dc36109b83ee73c60572b891589963b3defd6e78c34e2c9ecf27c47c7be8c62b60baf0fbb3470c454af739d55c8a2a7e374773ffbd740030b8e52c72359a8603df756a4c73ba152faf929acff0a7831ad8dbb33b06dc8eda2b43483ab3c04"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfce2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x1, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x4, 0x23, 0x6, [@generic={0x23, 0x31, "cfbd0bfc2470982497c79be906c17e1ad2dd266e70b2fbec6c899bc6928f90c2af"}, @generic={0xae, 0x6, "562ef54c1bdc1d756690045796ff3aed32004719f253b1dcf313b912b126fbe68ff68ef2a29babca9dabc7dfbb99f4c88aed88bb79561221b343ddc9dee40c2f784409a7517db52f36e3c4fe54fc5308d247823e31f0d9ff7d51598e4815dac2b5e5e0721f58ce24b8d7ebac397f6f9756c3eafeed143da597af8cbe3191da8b2a40bd6ac9eb86e1b63eca83d049ab939cf4333856e8e70322852616cb9dc02172e65bdcb9eca42d2151241d"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x13068caf2ff2cb7b, 0x3, 0x4, 0xa, [@generic={0x9b, 0xd, "709712b07cd8fd9fe205f3724e467f9e034a651ed8b3e5b36cb5db5b33109a5a85a70603f155ed6c207768856a235478556a4eca14cd1cabbd9815ba2da47766a93bb8633d33f13ce021b725917f58e76ce851835d96866cb358fa2901d51da4b6c9eec91c1f87cf1d1ef1d6b2026a7ac605b4de37ae928afee510cf0786873258dab56722bb786349c50ec3d6ccdf4e6695a5647e6b1d79b5"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x401}]}}]}}, {{0x9, 0x4, 0xab, 0xdc, 0x4, 0x8e, 0xec, 0x54, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "c6"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x97, 0x5, 0x400, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x6, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x8, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x8, 0x1, 0x1}]}, @hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xcb7}}], [{{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x7, 0x80, 0x9}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xff, 0xf, 0x4, [@generic={0xe0, 0x4, "6d1eae09abb33d9895d9af55121b6ccc193c9995ec7d71becf56a924b8cfb0f4541f5c646526322f9549643e4ea14bc3893e6ab54b9b52caa74a047058481aa5ad2af611111958f8ac5cd87555c44efb479d71a288787becb4fd49add4efc91231915e3455ad290d533ee2746f7151e02e84ea433f686b6abd2ef4aae09d821be564b1b76064be95a656a3c327645c541bb6166b824197d1edc1ddcb9e79a397f2fab908e046affd4730f0889e549187197a3f696614d252634b47e6a7e0c389b00d20b808970f1553003256b28c836269b930a958eb977bdc558f17cbc5"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xa, 0x7, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0xe, 0x0, [@generic={0x2, 0x18}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xc5, 0x1, 0x1, 0x40, 0x4}, 0x13, &(0x7f0000000140)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x4, 0x7, 0x5f, 0xd}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) io_uring_setup(0xdac, &(0x7f0000000180)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0xffffdffc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 10m52.719840051s ago: executing program 1 (id=2574): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @raw_data="4e57369cdaff221edca814b5d680222c501130b92ae8872b2de71ec20e3d3957cba417b959fa1ba5725a69924bc562726af46cb8ed0920ab1b9e4d1908472ac3a3203bceaba52486a8823f35776a9b5d0ce8bd96f08295d9421b06396a58049fe8b0f2821a58b5b0572e220b84c0826af89f3a89ea0027affc052562a2770d44869226dc6dd249765a8a9afa0e4ae38ff8a6d7af1d45cc73ef29e73eb83671850a21f3832db7a9442a84d14918b6164a0610c73e2f27d312c6d35b19d41e1852e067b7cadeb025d8"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4622, 0x4, @private0={0xfc, 0x0, '\x00', 0xff}, 0x5}}, 0x4, 0x1, 0x2e6c, 0x5, 0x50, 0x4, 0x6}, &(0x7f0000000300)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setrlimit(0xa, &(0x7f0000000000)={0x800, 0x7}) syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x0, 0x20000, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 10m40.672994473s ago: executing program 36 (id=2570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') read(r2, 0x0, 0x0) 10m36.924056074s ago: executing program 37 (id=2574): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @raw_data="4e57369cdaff221edca814b5d680222c501130b92ae8872b2de71ec20e3d3957cba417b959fa1ba5725a69924bc562726af46cb8ed0920ab1b9e4d1908472ac3a3203bceaba52486a8823f35776a9b5d0ce8bd96f08295d9421b06396a58049fe8b0f2821a58b5b0572e220b84c0826af89f3a89ea0027affc052562a2770d44869226dc6dd249765a8a9afa0e4ae38ff8a6d7af1d45cc73ef29e73eb83671850a21f3832db7a9442a84d14918b6164a0610c73e2f27d312c6d35b19d41e1852e067b7cadeb025d8"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4622, 0x4, @private0={0xfc, 0x0, '\x00', 0xff}, 0x5}}, 0x4, 0x1, 0x2e6c, 0x5, 0x50, 0x4, 0x6}, &(0x7f0000000300)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setrlimit(0xa, &(0x7f0000000000)={0x800, 0x7}) syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x0, 0x20000, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 10m5.919074957s ago: executing program 6 (id=2646): r0 = io_uring_setup(0x79bb, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x2890, &(0x7f0000000440)=ANY=[@ANYRES64=r2]) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x34}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local, 0xd8}}}, 0x32) close(r6) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) 10m4.729866737s ago: executing program 6 (id=2649): openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x8010, 0xffffffffffffffff, 0xa3bfe000) unshare(0x22020400) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x53, 0x3a, '\xd3-\'!!', 0x3a, '', 0x3a, './file/file0', 0x3a, [0x43, 0x4f]}, 0x33) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x101000) r3 = io_uring_setup(0x25f1, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x2, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r3, 0x2000000, 0x2, 0xf, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) setreuid(0xee01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0) 10m3.910429412s ago: executing program 6 (id=2651): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r5, 0x89e5, &(0x7f0000000280)=@rose) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpgid(0x0, r0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) 9m59.964640532s ago: executing program 6 (id=2656): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpgid(0x0, r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) 9m59.663830937s ago: executing program 6 (id=2657): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(0x0) inotify_init1(0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 9m59.29563168s ago: executing program 6 (id=2659): r0 = io_uring_setup(0x79bb, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x2890, &(0x7f0000000440)=ANY=[@ANYRES64=r2]) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x34}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local, 0xd8}}}, 0x32) close(r6) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) 9m58.861667571s ago: executing program 38 (id=2659): r0 = io_uring_setup(0x79bb, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x2890, &(0x7f0000000440)=ANY=[@ANYRES64=r2]) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x34}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local, 0xd8}}}, 0x32) close(r6) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) 5m15.77568667s ago: executing program 7 (id=3310): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpgid(0x0, r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) 5m14.576782795s ago: executing program 7 (id=3318): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2100) ioctl$I2C_SLAVE(r2, 0x703, 0x60) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) 5m14.444089865s ago: executing program 7 (id=3319): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000030100800c0001"], 0x114}], 0x1}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01431800"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'nr0\x00', 0xa00}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x802}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000180)={0xc}) 5m13.866979885s ago: executing program 7 (id=3321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a0001050000000000000000000000284e00000008000a0000000000"], 0x20}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYBLOB="200000007900210826bd7507fcdbdf2507000007000000ff0700"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, &(0x7f0000000580)=ANY=[@ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file1', [{}, {}, {0x20, '{)))*'}, {0x20, 'GPL\x00'}]}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x40000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0x13, 0x0, &(0x7f0000000800)) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket(0x10, 0x3, 0x0) 5m13.642423156s ago: executing program 7 (id=3323): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x9a52, 0x2000, 0xfffffffc, 0x18f}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x5, 0x60200000, 0x9, 0x1, 0xe5, 0x1ff, 0x0, 0x0, 0x4, 0x7}}, 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRESHEX=r6]) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}]}}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) connect(r3, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @multicast2}, 0x4, 0x0, 0x2, 0xc2}}, 0x80) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5m8.291043674s ago: executing program 7 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a0001050000000000000000000000284e00000008000a0000000000"], 0x20}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYBLOB="200000007900210826bd7507fcdbdf2507000007000000ff0700"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, &(0x7f0000000580)=ANY=[@ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file1', [{}, {}, {0x20, '{)))*'}, {0x20, 'GPL\x00'}]}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x40000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0x13, 0x0, &(0x7f0000000800)) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket(0x10, 0x3, 0x0) 4m52.99822193s ago: executing program 39 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a0001050000000000000000000000284e00000008000a0000000000"], 0x20}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYBLOB="200000007900210826bd7507fcdbdf2507000007000000ff0700"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, &(0x7f0000000580)=ANY=[@ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file1', [{}, {}, {0x20, '{)))*'}, {0x20, 'GPL\x00'}]}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x40000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0x13, 0x0, &(0x7f0000000800)) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket(0x10, 0x3, 0x0) 2m49.820653216s ago: executing program 0 (id=3705): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000001400)) recvmmsg(r3, &(0x7f0000001340)=[{{&(0x7f0000000240)=@ieee802154, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/251, 0x137}, {&(0x7f0000000780)=""/102, 0x3dd553a1412ad6ae}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x7, &(0x7f0000001880)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000bc0)=""/182, 0xb6}, {&(0x7f0000000c80)=""/145, 0xfffffeac}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/175, 0xaf}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000e80)=""/113, 0x71}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000f80)=""/146, 0x92}], 0x9, &(0x7f0000000700)=""/51, 0x3c}, 0x9}, {{&(0x7f0000001100)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001180)=""/133, 0x85}, {&(0x7f0000001240)=""/172, 0xac}], 0x2}, 0xf4e7}], 0x3, 0x40, &(0x7f0000001440)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'ax-^'}, {0x20, 'TlB^'}]}, 0x15) fsopen(0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) readahead(r5, 0x7fffffff, 0xffffffffffff0000) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000640)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2}, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20, 0x80}, 0x40000) 2m48.977492836s ago: executing program 0 (id=3706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000001400)) recvmmsg(r3, &(0x7f0000001340)=[{{&(0x7f0000000240)=@ieee802154, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/251, 0x137}, {&(0x7f0000000780)=""/102, 0x3dd553a1412ad6ae}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x7, &(0x7f0000001880)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000bc0)=""/182, 0xb6}, {&(0x7f0000000c80)=""/145, 0xfffffeac}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/175, 0xaf}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000e80)=""/113, 0x71}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000f80)=""/146, 0x92}], 0x9, &(0x7f0000000700)=""/51, 0x3c}, 0x9}, {{&(0x7f0000001100)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001180)=""/133, 0x85}, {&(0x7f0000001240)=""/172, 0xac}], 0x2}, 0xf4e7}], 0x3, 0x40, &(0x7f0000001440)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'ax-^'}, {0x20, 'TlB^'}]}, 0x15) fsopen(0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) readahead(r5, 0x7fffffff, 0xffffffffffff0000) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000640)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2}, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20, 0x80}, 0x40000) 2m47.628505429s ago: executing program 0 (id=3708): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x11, &(0x7f00000002c0), 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x10, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x2, 0x83, 0x1, {0x22, 0x499}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xaa, 0x7, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xfb, 0x2, 0x0, 0x40, 0x40}, 0x54, &(0x7f0000000080)={0x5, 0xf, 0x54, 0x4, [@generic={0x31, 0x10, 0xa, "b2f81b3b85f264b7cca5136ee924ee316c812845c818c43e9d369ce10482eee7057c5cb6e661f3f7f3c8ff812a56"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "13c7e0e64b3623d7ae0a704e8d49f52d"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x4, 0xffff}]}, 0x4, [{0x7f, &(0x7f0000000100)=@string={0x7f, 0x3, "f844dc566e34463db1e8636a67364ea76768362baeea7fc6d190e14fcfd93daa366ccd6bd351f8cc193bf5719607b416bb5d11765f6bb313f057326b140e95b9f9c0ccaaa6c8b49661fecd1a1714bfe0dd39ce670e87265b666ea1a4651d689ceb12d79b05ee483c70cbaf57602aef74f99d798fdfc0b37b04041554ee"}}, {0xf6, &(0x7f0000000180)=ANY=[@ANYBLOB="f603d38f56d868bffeb11922ef4133bb93da6f27ea9452dd2a8a360809f5e47ee9f869cf4a82352990196c1af6e5e7646be55c329db6ccc6f4126a3e2e18e0504b1111b6a723fdf8f78eb3d0bda04323ed0e9972e1a9f4a1056129ba5a436e59a5f4e38bf84f2ad52dd33bec4dd6c75a1e449b66008d6d379ce521dc99fb442b9b38021ce48a0d11d05532a946ee308522fed5a95f87b54af0580460ecdd61c3ffc273af547b3d1e1b94acc7a2dd1818dcbe1bfd038a1800e136ff47202c89ea9420fc7341225e3e21672671b17224757e9c71ef04f4a8ed40f4c8635f21e9633db410a6c7627021f5ab0ad81e15e68cade771f2f3ce"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syslog(0x2, 0xfffffffffffffffc, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_disconnect(r0) 2m42.720955114s ago: executing program 0 (id=3723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xea, 0x8004, 0xc46, 0x4, 0x1e}, &(0x7f0000000100)=0x14) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/2, 0x16}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) 2m37.618857703s ago: executing program 0 (id=3733): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) (async) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x1000f) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') rmdir(&(0x7f00000001c0)='./bus\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x4, 0x5, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x4, 0x5, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000100)={0x3002, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r5, 0x12, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x2, 0x83, 0x4003}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x2, 0x83, 0x4003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) dup3(r3, r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x6, 0xf3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x6, 0xf3, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.788332516s ago: executing program 2 (id=3736): openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x8010, 0xffffffffffffffff, 0xa3bfe000) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x25f1, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x2, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r2, 0x2000000, 0x2, 0xf, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) setreuid(0xee01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0) 2m36.499825945s ago: executing program 0 (id=3737): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x100000001, 0x123582) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x101600, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x40, 0x2, 0xb3, {0xb3, 0x31, "265d1fe9020b6068f8a988a344f134dd120f6081525cd58ae9a1ed6a1562e77847aede0c42903b6b0ef908c32f991d1a4bb510699ecfeea287c75b3f51ce14c0ca2640f3f76d6b27293fcbab2de1ac1e8606437864196c6ce9f4a32e92bcc93f9e896747d5046ecd7407ea4052b7310265a047ce54c2982665ecd043a22a3dd70efd1e957a3b548218c49babc5cc53efffc1d8b403f7a07f484b5a4787a8b19694256c7527d6e89932fce7a6ecc97b0e2a"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000840)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x4e, "401b0789b0728319c80217cba16a5cc9ffb86698b3f31e1ed7412a01d4cf91214cfeaec54147c9fd44ffc9f574e1fb1522736cdfd6ffe8653df98575fdab6988c35e97b9484090d61c9287a50afe"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x2, "dcbd"}, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x83, 0x3, "e63e5a"}, &(0x7f0000000500)={0x20, 0x84, 0x1, "f9"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "4a3ae0"}}) socket$key(0xf, 0x3, 0x2) read$FUSE(r3, &(0x7f0000003900)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r4, &(0x7f0000002140)=""/17, 0x6e0641d760400e0e, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x9f, 0xfe, 0x4, 0x22, 0x7, 0xfe, 0x40, 0x1, 0x0, 0x7f, 0x4, 0xbc, 0x7f, 0x9, 0x7, 0x23}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m35.870690931s ago: executing program 2 (id=3738): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 2m35.547889101s ago: executing program 2 (id=3739): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ptrace$setsig(0x4203, r0, 0x9, &(0x7f0000000380)={0x1c, 0x75, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="77ba00000000000000001f0000", @ANYRES32], 0x48}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func={0xe, 0x0, 0x0, 0xc, 0x4}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x61, 0x10, 0x5f, 0x0]}}, &(0x7f00000002c0)=""/199, 0x37, 0xc7, 0x0, 0x3, 0x10000, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x36, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000000069078ac141400ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090326e38"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}}, 0x24}}, 0x0) 2m35.444482739s ago: executing program 2 (id=3740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2m35.340165141s ago: executing program 2 (id=3741): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000030100800c0001"], 0x114}], 0x1}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'nr0\x00', 0xa00}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) 2m35.07699804s ago: executing program 2 (id=3742): syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan1\x00'}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x2483, &(0x7f00000009c0)={[{@huge_always}, {}, {@grpquota}, {@inode64}, {@gid}, {@inode64}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}], [{@smackfsroot={'smackfsroot', 0x3d, 'grpquota'}}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, ')*$}+'}}, {@euid_gt}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000040000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 2m21.133250024s ago: executing program 40 (id=3737): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x100000001, 0x123582) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x101600, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x40, 0x2, 0xb3, {0xb3, 0x31, "265d1fe9020b6068f8a988a344f134dd120f6081525cd58ae9a1ed6a1562e77847aede0c42903b6b0ef908c32f991d1a4bb510699ecfeea287c75b3f51ce14c0ca2640f3f76d6b27293fcbab2de1ac1e8606437864196c6ce9f4a32e92bcc93f9e896747d5046ecd7407ea4052b7310265a047ce54c2982665ecd043a22a3dd70efd1e957a3b548218c49babc5cc53efffc1d8b403f7a07f484b5a4787a8b19694256c7527d6e89932fce7a6ecc97b0e2a"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000840)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x4e, "401b0789b0728319c80217cba16a5cc9ffb86698b3f31e1ed7412a01d4cf91214cfeaec54147c9fd44ffc9f574e1fb1522736cdfd6ffe8653df98575fdab6988c35e97b9484090d61c9287a50afe"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x2, "dcbd"}, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x83, 0x3, "e63e5a"}, &(0x7f0000000500)={0x20, 0x84, 0x1, "f9"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "4a3ae0"}}) socket$key(0xf, 0x3, 0x2) read$FUSE(r3, &(0x7f0000003900)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r4, &(0x7f0000002140)=""/17, 0x6e0641d760400e0e, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x9f, 0xfe, 0x4, 0x22, 0x7, 0xfe, 0x40, 0x1, 0x0, 0x7f, 0x4, 0xbc, 0x7f, 0x9, 0x7, 0x23}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m19.615066295s ago: executing program 41 (id=3742): syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan1\x00'}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x2483, &(0x7f00000009c0)={[{@huge_always}, {}, {@grpquota}, {@inode64}, {@gid}, {@inode64}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}], [{@smackfsroot={'smackfsroot', 0x3d, 'grpquota'}}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, ')*$}+'}}, {@euid_gt}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000040000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 2m9.572429773s ago: executing program 5 (id=3669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="50007a802c0001"], 0x6c}}, 0x2004c084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/70, 0x46, 0x2000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000300)="8c1b57", 0x3}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@overlay={0x2, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "627f8cc5"}}) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r10, 0x7f69, 0x0, 0x4, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = fcntl$dupfd(r9, 0x0, r13) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000000)=0x30) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 1m44.556941084s ago: executing program 5 (id=3669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="50007a802c0001"], 0x6c}}, 0x2004c084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/70, 0x46, 0x2000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000300)="8c1b57", 0x3}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@overlay={0x2, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "627f8cc5"}}) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r10, 0x7f69, 0x0, 0x4, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = fcntl$dupfd(r9, 0x0, r13) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000000)=0x30) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 1m21.810132006s ago: executing program 5 (id=3669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="50007a802c0001"], 0x6c}}, 0x2004c084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/70, 0x46, 0x2000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000300)="8c1b57", 0x3}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@overlay={0x2, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "627f8cc5"}}) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r10, 0x7f69, 0x0, 0x4, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = fcntl$dupfd(r9, 0x0, r13) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000000)=0x30) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 1m6.210347332s ago: executing program 5 (id=3669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="50007a802c0001"], 0x6c}}, 0x2004c084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/70, 0x46, 0x2000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000300)="8c1b57", 0x3}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@overlay={0x2, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "627f8cc5"}}) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r10, 0x7f69, 0x0, 0x4, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = fcntl$dupfd(r9, 0x0, r13) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000000)=0x30) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 45.269473607s ago: executing program 5 (id=3669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="50007a802c0001"], 0x6c}}, 0x2004c084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/70, 0x46, 0x2000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000300)="8c1b57", 0x3}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@overlay={0x2, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "627f8cc5"}}) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r10, 0x7f69, 0x0, 0x4, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = fcntl$dupfd(r9, 0x0, r13) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000000)=0x30) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 24.275856597s ago: executing program 5 (id=3669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="50007a802c0001"], 0x6c}}, 0x2004c084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/70, 0x46, 0x2000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000300)="8c1b57", 0x3}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@overlay={0x2, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "627f8cc5"}}) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r10, 0x7f69, 0x0, 0x4, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) r14 = fcntl$dupfd(r9, 0x0, r13) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000000)=0x30) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 15.115624403s ago: executing program 8 (id=4055): r0 = syz_io_uring_setup(0x7f12, &(0x7f00000003c0)={0x0, 0x6f91, 0x80, 0x2, 0x8b}, &(0x7f0000000100), &(0x7f0000000240)) io_uring_enter(r0, 0x659e, 0x16e0, 0x10, &(0x7f0000000440)={[0x5]}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000480)={0x8000, 0x3, 0x0, 0x0, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002800647200001400028008001540000000000800064000000001140000001100010000000000000000000000000a"], 0x7c}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 14.56278939s ago: executing program 8 (id=4057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069111600000000008510000002000000870000000000000095000300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='scsi_eh_wakeup\x00', r0, 0x0, 0x4}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380000006800010000000000000000000a00000000000000100008800c0001000000002000000000060007001500000008000500", @ANYRES32=r2], 0x38}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000000000000a004e2100000003ff010000000000000000000000000001070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e22000000032001000000000000000000000000000204000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21ffffff81fc0200000000000000000000000000018bc60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000ffffe8000000000000000000000000000bb05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000002fe8000000000000000000000000000bb01800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24ffff0000fc0100000000000000000000000000000400"/784], 0x310) r3 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) io_destroy(0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000180)={r10, 0x0, 0x1}) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) sendmsg$AUDIT_SET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x400, 0x70bd29, 0x25dfdbfb, {0x4d, 0x1, 0x0, r11, 0x934, 0x9, 0x8, 0x21, 0x0, 0x2, 0x1}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 10.352542607s ago: executing program 8 (id=4062): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x53}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x14845) (async, rerun: 32) r2 = gettid() (rerun: 32) timer_create(0x1, &(0x7f0000000140)={0x0, 0x22, 0x2, @tid=r2}, &(0x7f0000000180)=0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {r4, r5+10000000}}, &(0x7f0000000240)) (async) getrlimit(0xc, &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xca4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x9e5caf1e1d9d9e15}, 0x18) ppoll(&(0x7f00000004c0)=[{r0, 0x2}, {r0, 0x1}, {r0, 0x400}, {}, {r7, 0x20}, {r0, 0x200}, {r0, 0x4046}], 0x7, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x7fff]}, 0x8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000600)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r8}) (async, rerun: 32) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000680)=0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r10, 0x2, 0x2002) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx\x00'}, 0x58) (async, rerun: 64) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000740), &(0x7f00000007c0)=0x80) (rerun: 64) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) futex(&(0x7f0000000800), 0x2, 0x1, &(0x7f0000000880)={r11, r12+60000000}, &(0x7f00000008c0)=0x2, 0x2) (async) ioctl$TIOCSBRK(r9, 0x5427) (async) syz_emit_ethernet(0x17c, &(0x7f0000000900)={@remote, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x4, 0x1, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "9024d3", 0x13e, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, {[@srh={0x67, 0x4, 0x4, 0x2, 0x0, 0x0, 0x2, [@ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @loopback}]}, @fragment={0xc, 0x0, 0xfd, 0x1, 0x0, 0x8, 0x66}, @srh={0x2, 0x0, 0x4, 0x0, 0xaf, 0x28, 0x7ff}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, "4a71b5", 0x2, "5588a8"}, "9444e65429e9bccbafa718333b4910fe5b680deb882594e8b05a7a002fd5400cb64675727690e2ca37652b4a01a8d0e3b185d20a910c855134e066ff6eddaa1f0b0256aba0671233808c0f78b4d35452438fc195ad0cce3dcb20819f526516309ac6e7ac09ae90fd9df5415466c226a1a8cdee9c869f421fe9fdc21a24eb9fcfa9a69db3c3048703fca175f1605fb575f38a0642ef5fd540d6fba8a3567da227f44e1b0c3a6b35c6e0765155acedccfa84520e035fb3f289669dbf24054f001f765c2b74f5e1a398e66d16b85e17f1bc887b2856d9d702cbc271d8d38722c9858c79f363439398ea3886d70d29ee20195184c1f87268"}}}}}}, &(0x7f0000000a80)={0x1, 0x4, [0xc8f, 0x8d9, 0x913, 0xfe9]}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_INTERFACE(r13, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r14, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r0) getpeername$packet(r0, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d00)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000001040)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1d0, r16, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x24000845}, 0x4000810) 9.98475176s ago: executing program 3 (id=4063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) pipe2$watch_queue(0x0, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61125d000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) 9.919433803s ago: executing program 4 (id=4065): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_create(0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) 9.655906636s ago: executing program 8 (id=4066): openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x8010, 0xffffffffffffffff, 0xa3bfe000) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x25f1, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x2, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r2, 0x2000000, 0x2, 0xf, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) setreuid(0xee01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 8.159983439s ago: executing program 3 (id=4067): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffff80000001, 0xc843) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000f3"], 0x14}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc018620b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 8.106021738s ago: executing program 8 (id=4069): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101902, 0x10) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@FILEID_INO32_GEN={0x8, 0x1, {0x8001, 0x1e375b0b}}, &(0x7f0000000180), 0x2400) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x96100) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) poll(&(0x7f0000000140)=[{r3, 0x19f23}], 0x1, 0x20) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$dupfd(r2, 0x406, r7) r8 = getpid() r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0x15) ioctl$TUNSETLINK(r9, 0x400454cd, 0x6) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf4, r10, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8b7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f0000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c32}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x51e}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x40) process_vm_readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000019c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0d1f001e000000000400380000000e0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002410}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r12, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x104) sched_setscheduler(r8, 0x5, &(0x7f00000001c0)=0x5) 6.31116913s ago: executing program 4 (id=4070): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000001400)) recvmmsg(r3, &(0x7f0000001340)=[{{&(0x7f0000000240)=@ieee802154, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/251, 0x137}, {&(0x7f0000000780)=""/102, 0x3dd553a1412ad6ae}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x7, &(0x7f0000001880)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000bc0)=""/182, 0xb6}, {&(0x7f0000000c80)=""/145, 0xfffffeac}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/175, 0xaf}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000e80)=""/113, 0x71}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000f80)=""/146, 0x92}], 0x9, &(0x7f0000000700)=""/51, 0x3c}, 0x9}, {{&(0x7f0000001100)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001180)=""/133, 0x85}, {&(0x7f0000001240)=""/172, 0xac}], 0x2}, 0xf4e7}], 0x3, 0x40, &(0x7f0000001440)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) readahead(0xffffffffffffffff, 0x7fffffff, 0xffffffffffff0000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000640)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23894) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20, 0x80}, 0x40000) 6.222439761s ago: executing program 4 (id=4071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905810356"], 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000340)=0x120000, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x6e20, 0x0, @mcast1}, 0x1c) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3, 0x5}, 0x20) r7 = syz_open_procfs(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x4b) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f00000000c0)=0x3, 0x4) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.111923667s ago: executing program 9 (id=4072): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40800) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x14}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x3, 0x1}}) syz_open_dev$MSR(0x0, 0x0, 0x0) 6.041003805s ago: executing program 3 (id=4073): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "e3da62162895237d", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "54d9bfbb39e9f6e1", "811282b02c52c135f42c48b858936885", "e60299a4", "4db1ec19994fa633"}, 0x28) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="04", 0x1}], 0x1}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10440, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) fadvise64(r5, 0x7, 0xfffffffffffffcc2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000000000060001c000"]) 4.981722536s ago: executing program 3 (id=4074): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000019c0)={0xfc, {"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", 0xff72}}, 0x1006) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002600)=ANY=[@ANYBLOB="e00000001200090500000000000000000800000000000000411f31ebed395a5ae4782e71ce8fc2cb9ee348739c52a433906c4f8270f6324b408f6ac82947262a45f3a4e261720a2918fabc9e761c53f7dbebba30bd3107dffddc62d57537ce9fde3674ceac591a72f3000abe0d8efc7989b69324e1206e578885c834e724d6766d856f0dde39d75c8e324def58e27ec3001506000000291f46ab0fa269ae9bac769ea55743fc70b34fe8611892095104276d4b879c5cf97f9283a34ebe1711ec6f25e456f081482fef6569a1e2000194e865d1affdba49967cf82b601e000000"], 0xe0}], 0x1, 0x0, 0x0, 0x22000800}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.402214737s ago: executing program 9 (id=4075): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100028bd03000000df254500000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000200000059000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) timerfd_gettime(r6, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x31, &(0x7f0000002580)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0xf37ca56df1674dff}, 0x0) r8 = socket(0x1d, 0x3, 0x1) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x2, 0x5001) r9 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) timer_create(0x7, &(0x7f0000000380)={0x0, 0x28, 0x1, @thr={&(0x7f0000000440), &(0x7f0000000340)="751d0c646a1376e2609659ee99790f49f27bd4f3519412f9b44e98be9f23f8"}}, &(0x7f00000003c0)) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x65, 0x8, 0x0, 0x20000000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.386857688s ago: executing program 9 (id=4076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, 0x0, 0x0) write$binfmt_aout(r7, 0x0, 0x28) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="09dea4afb76288fa135537845f3188b4cb061c94084050d4", 0x50}, {&(0x7f00000000c0)="6d1c10ab66168de85e3d6fd8833c471b215283b29bf7cd66696646aa0c5c3250fbf9d3c2ee77d799c10202be93deafca9dd95e1eac4645fc209eb2fbd5a528ba8318"}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1}, 0x1}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)={0x30, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008000) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c841}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) io_uring_enter(r9, 0x55bf, 0x1bdb, 0xa, &(0x7f00000004c0)={[0xfffffffffffffff9]}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x24000000) 3.077597404s ago: executing program 4 (id=4077): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, 0x0, 0x0) write$binfmt_aout(r7, 0x0, 0x28) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="09dea4afb76288fa135537845f3188b4cb061c94084050d4", 0x50}, {&(0x7f00000000c0)="6d1c10ab66168de85e3d6fd8833c471b215283b29bf7cd66696646aa0c5c3250fbf9d3c2ee77d799c10202be93deafca9dd95e1eac4645fc209eb2fbd5a528ba8318"}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1}, 0x1}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)={0x30, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008000) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c841}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) io_uring_enter(r9, 0x55bf, 0x1bdb, 0xa, &(0x7f00000004c0)={[0xfffffffffffffff9]}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r11, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x24000000) 2.235164035s ago: executing program 9 (id=4078): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000040)='J', 0x1, 0xfffffffffffffffe) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x9, 0x7d8c0899d9b72a7, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc881}, 0x24004090) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000019"], 0x14}}, 0x800) 1.320018242s ago: executing program 3 (id=4079): openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x8010, 0xffffffffffffffff, 0xa3bfe000) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x25f1, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x2, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r2, 0x2000000, 0x2, 0xf, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) setreuid(0xee01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 1.31970067s ago: executing program 9 (id=4080): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_create(0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) 1.287698733s ago: executing program 4 (id=4081): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000001400)) recvmmsg(r3, &(0x7f0000001340)=[{{&(0x7f0000000240)=@ieee802154, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/251, 0x137}, {&(0x7f0000000780)=""/102, 0x3dd553a1412ad6ae}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x7, &(0x7f0000001880)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000bc0)=""/182, 0xb6}, {&(0x7f0000000c80)=""/145, 0xfffffeac}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/175, 0xaf}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000e80)=""/113, 0x71}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000f80)=""/146, 0x92}], 0x9, &(0x7f0000000700)=""/51, 0x3c}, 0x9}, {{&(0x7f0000001100)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001180)=""/133, 0x85}, {&(0x7f0000001240)=""/172, 0xac}], 0x2}, 0xf4e7}], 0x3, 0x40, &(0x7f0000001440)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) readahead(0xffffffffffffffff, 0x7fffffff, 0xffffffffffff0000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000640)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23894) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20, 0x80}, 0x40000) 124.95415ms ago: executing program 8 (id=4082): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'xWL^'}, {0x20, 'TtB^'}, {0x20, 'TtB^'}, {0x20, '#@'}, {0x20, '#! '}, {0x20, 'aWL^'}]}, 0x26) (fail_nth: 4) 97.039773ms ago: executing program 9 (id=4083): msgrcv(0x0, &(0x7f0000000400)={0x0, ""/153}, 0xa1, 0x2, 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000200)=@framed={{}, [@exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000010000000400", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sync() sync() sync() sync() sync() sync() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 96.597825ms ago: executing program 4 (id=4084): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009f40522000000000009059232"], 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a0000090505"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff0401000905"], 0x0) 0s ago: executing program 3 (id=4085): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@generic="0bccf04c7178"]}, 0x18}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(r2, &(0x7f0000000000), 0x0, 0x20040004) kernel console output (not intermixed with test programs): 3] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.961351][T19714] hsr_slave_1: entered promiscuous mode [ 1636.973271][T11733] usb 10-1: Product: syz [ 1636.979070][T19714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1636.979489][T11733] usb 10-1: Manufacturer: syz [ 1636.987036][T19714] Cannot create hsr debugfs directory [ 1637.009530][T11733] usb 10-1: SerialNumber: syz [ 1637.017613][T11733] usb 10-1: config 0 descriptor?? [ 1637.025878][T11733] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1637.107364][T19711] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.145033][T19676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.223508][T19711] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.290567][T19676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.304148][T19711] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.331034][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.338179][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.353948][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.361110][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.394356][T19676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1637.404849][T19676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1637.508415][T19711] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.592491][T19676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.820659][T19711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1637.841649][T19598] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1637.853367][T19711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1637.886296][T19711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1637.899924][T19711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1638.005558][T19676] veth0_vlan: entered promiscuous mode [ 1638.021415][T19598] usb 5-1: Using ep0 maxpacket: 32 [ 1638.027559][T19676] veth1_vlan: entered promiscuous mode [ 1638.034109][T19598] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1638.062119][T19598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.074981][T19753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.107464][T19598] usb 5-1: config 0 descriptor?? [ 1638.112666][T19753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.119698][T19598] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1638.163004][T19676] veth0_macvtap: entered promiscuous mode [ 1638.231551][T19676] veth1_macvtap: entered promiscuous mode [ 1638.296614][T19711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.303421][ T5830] Bluetooth: hci6: command tx timeout [ 1638.347360][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.376801][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.401120][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.423502][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.444415][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.471162][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.491276][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.511361][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.521405][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.532636][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.543538][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.554590][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.567053][T19676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.581185][T19598] gspca_sunplus: reg_w_riv err -71 [ 1638.586454][T19598] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1638.587754][T19711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.597178][T19598] usb 5-1: USB disconnect, device number 116 [ 1638.621560][ T5830] Bluetooth: hci7: command tx timeout [ 1638.647470][ T5830] Bluetooth: hci1: Unknown advertising packet type: 0x19 [ 1638.647504][ T5830] Bluetooth: hci1: Unknown advertising packet type: 0x1f [ 1638.657293][ T5830] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 1638.664504][ T5830] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1638.691193][T11733] gspca_zc3xx: reg_w_i err -71 [ 1638.698086][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.715102][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.729053][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.739700][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.751957][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.762495][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.772769][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.783493][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.793419][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.803899][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.813784][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.824580][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.834612][T19676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.845936][T19676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.858381][T19676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1638.875627][T19676] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.884912][T19676] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.894203][T19676] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.903039][T19676] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.922446][T19485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.929612][T19485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.948442][T19714] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1638.974987][T19714] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1638.985643][T19714] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1638.997217][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.004381][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.026361][T19714] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1639.110572][T19711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1639.252545][ T1903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.260423][ T1903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.321161][T11733] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1639.327784][T11733] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1639.344266][T11733] usb 10-1: USB disconnect, device number 72 [ 1639.380328][T19773] syz_tun: entered promiscuous mode [ 1639.430467][T19485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.441769][T19485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.459289][T19714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.534113][T19714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.550456][T19711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1639.561257][ T5873] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1639.574480][T15639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.581667][T15639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.626707][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.633958][ T1903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.732050][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 1639.744355][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1639.767958][T19711] veth0_vlan: entered promiscuous mode [ 1639.776903][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1639.789383][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.798354][ T5873] usb 5-1: Product: syz [ 1639.803344][ T5873] usb 5-1: Manufacturer: syz [ 1639.808108][ T5873] usb 5-1: SerialNumber: syz [ 1639.826957][T19711] veth1_vlan: entered promiscuous mode [ 1639.843069][ T5873] usb 5-1: config 0 descriptor?? [ 1639.855952][ T5873] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1639.890834][T19711] veth0_macvtap: entered promiscuous mode [ 1639.918022][T19711] veth1_macvtap: entered promiscuous mode [ 1639.981852][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1639.992966][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.021227][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.042283][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.057590][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.073193][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.083574][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.094509][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.104722][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.116109][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.127916][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.151067][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.171082][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.201207][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.220150][T19711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1640.321915][ T1903] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.343879][T19772] syz_tun: left promiscuous mode [ 1640.365061][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.398606][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.408777][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.425189][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.435307][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.445940][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.458418][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.469415][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.479819][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.491290][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.501203][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.511701][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.521621][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.533453][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.543389][T19711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.553898][T19711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.566361][T19711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1640.610472][ T1903] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.632475][T19711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.641612][T19711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.650321][T19711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.659104][T19711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.715478][T19714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.939734][T19770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.967155][T17724] kernel write not supported for file /cpu/0/msr (pid: 17724 comm: kworker/0:3) [ 1641.070600][ T1903] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.115297][T19770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.202909][ T5873] gspca_zc3xx: reg_w_i err -110 [ 1641.715489][ T1903] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.791248][ T5873] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1641.797762][ T5873] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1641.829477][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.862418][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.984563][T13828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1641.992218][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.000060][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.021499][T13828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1642.034224][T13828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1642.047488][T13828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1642.061735][T13828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1642.069084][T13828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1642.120575][T19714] veth0_vlan: entered promiscuous mode [ 1642.153866][T19714] veth1_vlan: entered promiscuous mode [ 1642.228671][T19714] veth0_macvtap: entered promiscuous mode [ 1642.243492][T19714] veth1_macvtap: entered promiscuous mode [ 1642.259937][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.270569][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.280640][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.292159][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.302088][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.312672][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.322602][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.333978][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.344744][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.355568][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.365502][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.376273][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.386215][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.396716][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.406660][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.417678][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.430196][T19714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.491692][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.502319][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.512261][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.522808][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.533797][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.544922][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.554951][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.565479][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.575412][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.585989][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.595904][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.606427][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.616686][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.627442][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.638212][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.649293][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.659238][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.669767][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.680819][T19714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.746595][T19714] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.755565][T19714] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.769625][T19714] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.780267][T19714] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.864330][ T1903] bridge_slave_1: left allmulticast mode [ 1642.870022][ T1903] bridge_slave_1: left promiscuous mode [ 1642.876257][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.886252][ T1903] bridge_slave_0: left allmulticast mode [ 1642.892524][ T1903] bridge_slave_0: left promiscuous mode [ 1642.898517][ T1903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.899415][T19807] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3784'. [ 1644.132212][T13828] Bluetooth: hci3: command tx timeout [ 1644.142855][T14138] usb 5-1: USB disconnect, device number 117 [ 1645.161315][ T5871] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1645.347138][ T5871] usb 10-1: Using ep0 maxpacket: 8 [ 1645.353949][ T5871] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1645.373233][ T5871] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1645.392824][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.409619][ T5871] usb 10-1: Product: syz [ 1645.419987][ T5871] usb 10-1: Manufacturer: syz [ 1645.445264][ T1903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.450644][ T5871] usb 10-1: SerialNumber: syz [ 1645.467997][ T5871] usb 10-1: config 0 descriptor?? [ 1645.473904][ T1903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.478557][ T5871] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1645.493572][ T1903] bond0 (unregistering): Released all slaves [ 1646.304499][ T5871] gspca_zc3xx: reg_w_i err -110 [ 1646.309960][T13828] Bluetooth: hci3: command tx timeout [ 1646.469442][T19796] chnl_net:caif_netlink_parms(): no params data found [ 1646.752120][T19485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.759987][T19485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.901066][ T5871] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1646.907544][ T5871] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1646.946595][T19796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.956740][T19796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.023052][T19796] bridge_slave_0: entered allmulticast mode [ 1647.030160][T19796] bridge_slave_0: entered promiscuous mode [ 1647.091815][ T1903] hsr_slave_0: left promiscuous mode [ 1647.097855][ T1903] hsr_slave_1: left promiscuous mode [ 1647.106853][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1647.114507][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.124090][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1647.132209][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.158721][ T1903] veth1_macvtap: left promiscuous mode [ 1647.164376][ T1903] veth0_macvtap: left promiscuous mode [ 1647.169915][ T1903] veth1_vlan: left promiscuous mode [ 1647.175324][ T1903] veth0_vlan: left promiscuous mode [ 1647.464469][T19847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.475185][T19847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.886496][ T1903] team0 (unregistering): Port device team_slave_1 removed [ 1647.949185][ T1903] team0 (unregistering): Port device team_slave_0 removed [ 1648.371465][T13828] Bluetooth: hci3: command tx timeout [ 1648.598788][T19796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.606711][T19796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.616429][T19796] bridge_slave_1: entered allmulticast mode [ 1648.623961][T19796] bridge_slave_1: entered promiscuous mode [ 1648.728348][ T8326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.753473][ T8326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.946415][T19796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.958323][T19796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.235467][T17724] usb 10-1: USB disconnect, device number 73 [ 1649.497609][T19796] team0: Port device team_slave_0 added [ 1650.014441][T19796] team0: Port device team_slave_1 added [ 1650.518573][T13828] Bluetooth: hci3: command tx timeout [ 1650.604821][T19796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1650.612608][T19796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1650.693531][T19796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1650.737878][T19796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1650.792752][T19796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1650.821591][T17724] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1651.783131][T17724] usb 10-1: Using ep0 maxpacket: 8 [ 1651.800266][T19796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.802287][T17724] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1651.939621][T19881] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1652.433685][T17724] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1652.605522][T17724] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.640175][T17724] usb 10-1: Product: syz [ 1652.659049][T17724] usb 10-1: Manufacturer: syz [ 1652.804774][T17724] usb 10-1: SerialNumber: syz [ 1653.039777][T17724] usb 10-1: config 0 descriptor?? [ 1653.048998][T17724] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1653.052832][T19796] hsr_slave_0: entered promiscuous mode [ 1653.068122][T19796] hsr_slave_1: entered promiscuous mode [ 1653.143121][T19796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1653.144281][ T987] Bluetooth: hci5: Frame reassembly failed (-84) [ 1653.150712][T19796] Cannot create hsr debugfs directory [ 1653.210873][T17724] gspca_zc3xx: reg_w_i err -71 [ 1653.419728][T19894] netlink: 244 bytes leftover after parsing attributes in process `syz.8.3809'. [ 1654.211069][T17724] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1654.285513][T17724] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1654.306249][T17724] usb 10-1: USB disconnect, device number 74 [ 1654.869998][T19796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1654.883695][T19796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1654.894760][T19796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1654.904813][T19796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1655.174345][T13828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1655.893145][T19796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.956564][T19796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.215313][T13828] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 1656.216228][T15639] Bluetooth: hci5: Frame reassembly failed (-84) [ 1656.477232][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.484476][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.637494][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.644941][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.803322][T19796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1656.824090][T19796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1657.976005][T19940] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3821'. [ 1658.281938][T13828] Bluetooth: hci5: command 0x1003 tx timeout [ 1658.298298][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1658.790074][T19796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1659.509948][T19959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1660.142482][T14138] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1660.169057][T19796] veth0_vlan: entered promiscuous mode [ 1660.182004][T19796] veth1_vlan: entered promiscuous mode [ 1660.211177][T19796] veth0_macvtap: entered promiscuous mode [ 1660.220629][T19796] veth1_macvtap: entered promiscuous mode [ 1660.249032][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.270396][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.302867][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.302964][T14138] usb 10-1: Using ep0 maxpacket: 16 [ 1660.328325][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.705232][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.714406][T14138] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1660.729919][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.735215][T14138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.750121][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.772566][T14138] usb 10-1: Product: syz [ 1660.776865][T14138] usb 10-1: Manufacturer: syz [ 1660.788891][T14138] usb 10-1: SerialNumber: syz [ 1660.791000][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.809261][T14138] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1660.826964][T14138] r8152-cfgselector 10-1: config 0 descriptor?? [ 1660.837071][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.878264][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.905384][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.916087][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.926024][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.937208][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.947091][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.957772][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.970896][T19796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.008973][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.030050][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.040248][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.051210][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.066811][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.077436][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.087335][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.098269][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.108172][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.118629][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.128478][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.138985][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.148883][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.159363][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.170189][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.180757][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.190625][T19796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.201188][T19796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.244587][T19796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.282449][ T5871] r8152-cfgselector 10-1: USB disconnect, device number 75 [ 1661.304758][T19796] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.313964][T19796] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.328483][T19796] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.361143][T19796] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.637958][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.647960][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.444428][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.453394][T19989] fuse: Bad value for 'fd' [ 1662.453615][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.121405][ T5873] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1663.412937][ T5873] usb 9-1: device descriptor read/64, error -71 [ 1664.138876][ T5873] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1664.619690][ T5873] usb 9-1: device descriptor read/64, error -71 [ 1664.839843][T20002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3842'. [ 1664.894934][ T5873] usb usb9-port1: attempt power cycle [ 1665.794826][T20014] overlayfs: missing 'workdir' [ 1665.860068][ T6151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.966860][ T6151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.043792][ T6151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.131231][ T6151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.233240][ T6151] bridge_slave_1: left allmulticast mode [ 1666.238913][ T6151] bridge_slave_1: left promiscuous mode [ 1666.250157][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.259637][ T6151] bridge_slave_0: left allmulticast mode [ 1666.266095][ T6151] bridge_slave_0: left promiscuous mode [ 1666.271945][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.722073][ T5953] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1667.824538][ T9282] Bluetooth: hci3: Frame reassembly failed (-84) [ 1667.826412][T13828] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 1667.927785][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 1668.201297][ T5953] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1668.303715][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.497796][ T9282] Bluetooth: hci5: Frame reassembly failed (-84) [ 1668.510558][ T9888] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 1668.638872][ T5953] usb 5-1: config 0 descriptor?? [ 1668.684587][ T5953] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1668.721335][T20036] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1668.732678][T20036] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1668.748695][T20036] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1668.769527][T20036] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1668.792410][T20036] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1668.799926][T20036] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1669.035004][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.047050][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.061976][ T6151] bond0 (unregistering): Released all slaves [ 1669.077231][ T5953] gspca_sunplus: reg_w_riv err -71 [ 1669.107435][ T5953] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1669.117697][ T5953] usb 5-1: USB disconnect, device number 118 [ 1669.257303][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.264055][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.640833][T20034] chnl_net:caif_netlink_parms(): no params data found [ 1669.661254][ T5830] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1669.724866][ T6151] hsr_slave_0: left promiscuous mode [ 1669.787989][ T6151] hsr_slave_1: left promiscuous mode [ 1669.794386][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.801183][ T5953] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1669.802017][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.818183][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.831132][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.863275][ T6151] veth1_macvtap: left promiscuous mode [ 1669.868878][ T6151] veth0_macvtap: left promiscuous mode [ 1669.875686][ T6151] veth1_vlan: left promiscuous mode [ 1669.881114][ T6151] veth0_vlan: left promiscuous mode [ 1669.981199][ T5953] usb 9-1: Using ep0 maxpacket: 16 [ 1669.990505][ T5953] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1670.008998][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.027909][ T5953] usb 9-1: Product: syz [ 1670.036583][ T5953] usb 9-1: Manufacturer: syz [ 1670.047165][ T5953] usb 9-1: SerialNumber: syz [ 1670.063346][ T5953] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1670.069893][ T5953] r8152-cfgselector 9-1: config 0 descriptor?? [ 1670.077684][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1670.231218][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1670.248687][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.269489][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1670.301104][ T9] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1670.315792][ T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1670.327058][ T9] usb 5-1: Product: syz [ 1670.331315][ T9] usb 5-1: Manufacturer: syz [ 1670.336123][ T9] usb 5-1: SerialNumber: syz [ 1670.342751][ T9] usb 5-1: config 0 descriptor?? [ 1670.349358][ T9] usb 5-1: NFC: intf ffff8880459d7000 id ffffffff8f2fa4e0 [ 1670.452544][T13828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1670.572741][T17215] r8152-cfgselector 9-1: USB disconnect, device number 16 [ 1670.657691][ T5873] usb 5-1: USB disconnect, device number 119 [ 1670.862642][T13828] Bluetooth: hci8: command tx timeout [ 1671.277365][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 1671.356965][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 1671.600524][ T9282] Bluetooth: hci3: Frame reassembly failed (-84) [ 1671.640638][ T66] Bluetooth: hci3: Frame reassembly failed (-84) [ 1671.722600][ T5873] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1672.061394][ T5873] usb 5-1: device descriptor read/64, error -71 [ 1672.321622][ T5873] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1672.474798][ T5873] usb 5-1: device descriptor read/64, error -71 [ 1672.597833][ T5873] usb usb5-port1: attempt power cycle [ 1672.975316][ T5830] Bluetooth: hci8: command tx timeout [ 1673.230579][T20069] 9pnet_fd: Insufficient options for proto=fd [ 1673.553579][T20065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1673.564226][ T5873] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1673.659516][T13828] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1673.666285][ T5830] Bluetooth: hci3: command 0x1003 tx timeout [ 1673.731146][ T5873] usb 5-1: device descriptor read/8, error -71 [ 1674.321213][T20034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.331246][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.407614][T20034] bridge_slave_0: entered allmulticast mode [ 1674.410171][ T5873] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1674.470085][T20034] bridge_slave_0: entered promiscuous mode [ 1674.495987][T20078] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3862'. [ 1674.530493][T20034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.641139][ T5873] usb 5-1: device not accepting address 123, error -71 [ 1674.648467][ T5873] usb usb5-port1: unable to enumerate USB device [ 1674.883562][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.893549][T20034] bridge_slave_1: entered allmulticast mode [ 1674.900736][T20034] bridge_slave_1: entered promiscuous mode [ 1675.525805][T13828] Bluetooth: hci8: command tx timeout [ 1676.131519][T20090] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3864'. [ 1676.244952][T20034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.270175][T20034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.752421][T20034] team0: Port device team_slave_0 added [ 1677.004162][T20102] 9pnet_fd: Insufficient options for proto=fd [ 1677.571416][T13828] Bluetooth: hci8: command tx timeout [ 1677.710545][ T9282] Bluetooth: hci3: Frame reassembly failed (-84) [ 1678.033585][T20034] team0: Port device team_slave_1 added [ 1678.312693][T20034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1678.320041][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.357619][T20034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.392088][T20034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.399120][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.425275][T20034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.448853][T20120] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3871'. [ 1678.660138][T20034] hsr_slave_0: entered promiscuous mode [ 1678.683774][T20034] hsr_slave_1: entered promiscuous mode [ 1678.691134][T19598] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1678.699521][T20034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1678.717770][T20034] Cannot create hsr debugfs directory [ 1679.006968][T19598] usb 9-1: device descriptor read/64, error -71 [ 1679.858330][T20036] Bluetooth: hci3: command 0x1003 tx timeout [ 1679.866783][T13828] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1680.140153][T19598] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1680.267024][T20134] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3876'. [ 1680.319358][T19598] usb 9-1: device descriptor read/64, error -71 [ 1680.463169][T19598] usb usb9-port1: attempt power cycle [ 1680.812402][T19598] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1680.850822][T20034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1680.870344][T19598] usb 9-1: device descriptor read/8, error -71 [ 1680.901207][T20034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1680.959712][T20143] atomic_op ffff888058833198 conn xmit_atomic 0000000000000000 [ 1680.970156][T20137] atomic_op ffff88805c29e998 conn xmit_atomic 0000000000000000 [ 1680.972150][T20034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1681.417994][T20034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1681.473993][T19598] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1681.484184][T20034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.497228][T20034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.522049][T19598] usb 9-1: device descriptor read/8, error -71 [ 1681.534078][T15639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.541264][T15639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.570081][T20149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.669972][T15639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.677198][T15639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.767688][T19598] usb usb9-port1: unable to enumerate USB device [ 1681.788852][T20149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.898952][T20157] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1683.122071][ T9282] Bluetooth: hci3: Frame reassembly failed (-84) [ 1683.137747][T19598] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1683.311475][T19598] usb 9-1: device descriptor read/64, error -71 [ 1683.432765][T20034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.561121][T19598] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1683.859754][T20034] veth0_vlan: entered promiscuous mode [ 1683.926690][T20034] veth1_vlan: entered promiscuous mode [ 1684.160038][T20034] veth0_macvtap: entered promiscuous mode [ 1684.913205][T20034] veth1_macvtap: entered promiscuous mode [ 1684.960078][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.974418][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.079164][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.091231][T20036] Bluetooth: hci3: command 0x1003 tx timeout [ 1685.100339][T13828] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1685.121253][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.140165][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.181061][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.222047][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.245960][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.258978][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.269657][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.280098][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.291235][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.301475][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.313155][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.328095][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.340819][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.368919][T20194] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3889'. [ 1685.375434][T20034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.406700][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.418114][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.430672][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.444234][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.460844][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.477785][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.488304][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.499449][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.509642][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.520642][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.531114][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.543158][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.568080][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.571137][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1685.587693][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.609969][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.620713][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.631464][T20034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.643943][T20034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.660355][T20034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1685.727540][T20198] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1685.747251][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1685.783918][T20034] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.786824][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.796276][T20034] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.813457][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1685.813490][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.854279][ T9] usb 5-1: config 0 descriptor?? [ 1685.865902][ T9] hub 5-1:0.0: USB hub found [ 1685.870022][T20034] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.897038][T20034] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.121764][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1686.401231][ T9282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.420771][ T9282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.467719][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.513382][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.323792][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1688.370829][ T987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.372250][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1688.514790][ T9] usb 5-1: USB disconnect, device number 124 [ 1688.591776][ T987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.708415][ T987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.806381][ T987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.896799][ T987] bridge_slave_1: left allmulticast mode [ 1688.902668][ T987] bridge_slave_1: left promiscuous mode [ 1688.908366][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.920054][ T987] bridge_slave_0: left allmulticast mode [ 1688.926225][ T987] bridge_slave_0: left promiscuous mode [ 1688.932614][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.131668][T13828] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1690.402523][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.422280][T20036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1690.468583][T20036] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1690.481094][T20036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1690.488842][T20036] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1690.521856][T20036] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1690.529664][T20036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1690.568502][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.605725][ T987] bond0 (unregistering): Released all slaves [ 1690.935483][ T5953] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1691.315008][T14138] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1691.481088][T14138] usb 5-1: Using ep0 maxpacket: 8 [ 1691.486253][ T5953] usb 9-1: Using ep0 maxpacket: 16 [ 1691.509782][T14138] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1691.535882][ T5953] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1691.577846][T14138] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1691.604010][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.621816][T14138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.634911][ T5953] usb 9-1: Product: syz [ 1691.639136][ T5953] usb 9-1: Manufacturer: syz [ 1691.650378][T14138] usb 5-1: Product: syz [ 1691.670779][ T5953] usb 9-1: SerialNumber: syz [ 1691.675931][T14138] usb 5-1: Manufacturer: syz [ 1691.680542][T14138] usb 5-1: SerialNumber: syz [ 1691.704581][T14138] usb 5-1: config 0 descriptor?? [ 1691.713178][ T5953] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1691.719480][ T5953] r8152-cfgselector 9-1: config 0 descriptor?? [ 1691.728524][T14138] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1691.900435][ T987] hsr_slave_0: left promiscuous mode [ 1691.911369][ T987] hsr_slave_1: left promiscuous mode [ 1691.934058][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1691.943372][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.960474][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1691.968455][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.007333][ T987] veth1_macvtap: left promiscuous mode [ 1692.014279][ T987] veth0_macvtap: left promiscuous mode [ 1692.021139][ T987] veth1_vlan: left promiscuous mode [ 1692.027456][ T987] veth0_vlan: left promiscuous mode [ 1692.580039][ T9] r8152-cfgselector 9-1: USB disconnect, device number 23 [ 1692.611794][T13828] Bluetooth: hci3: command tx timeout [ 1692.991448][T14138] gspca_zc3xx: reg_w_i err -110 [ 1693.562233][T20255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.589691][T14138] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1693.591277][T20255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.596222][T14138] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1694.324630][ T987] team0 (unregistering): Port device team_slave_1 removed [ 1694.400018][ T987] team0 (unregistering): Port device team_slave_0 removed [ 1694.701164][T13828] Bluetooth: hci3: command tx timeout [ 1695.054864][T20229] chnl_net:caif_netlink_parms(): no params data found [ 1695.496185][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1695.741122][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1695.773506][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.787186][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1695.810846][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.849402][T20229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.858926][T20229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.859219][T20229] bridge_slave_0: entered allmulticast mode [ 1695.859907][ T5953] usb 5-1: USB disconnect, device number 125 [ 1695.876664][T20229] bridge_slave_0: entered promiscuous mode [ 1695.880313][T20229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.880386][T20229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.880563][T20229] bridge_slave_1: entered allmulticast mode [ 1695.890903][T20229] bridge_slave_1: entered promiscuous mode [ 1695.920609][ T9] usb 9-1: config 0 descriptor?? [ 1695.924377][ T9] hub 9-1:0.0: USB hub found [ 1695.975744][T20229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.978353][T20229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.181921][ T9] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1696.361299][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1696.724831][T20229] team0: Port device team_slave_0 added [ 1696.738675][T20229] team0: Port device team_slave_1 added [ 1696.772198][T20036] Bluetooth: hci3: command tx timeout [ 1696.881947][T20229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.891041][T20229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.920557][T20229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.941310][T20229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.949066][T20229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.977090][T20229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.087737][T20229] hsr_slave_0: entered promiscuous mode [ 1697.095724][T20229] hsr_slave_1: entered promiscuous mode [ 1697.120644][T20229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1697.144146][T20229] Cannot create hsr debugfs directory [ 1697.764239][T20229] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1697.778854][T20229] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1697.796181][T20229] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1697.815542][T20229] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1697.994500][T20229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.038828][T20229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.058850][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.066094][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.088578][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.095799][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.186597][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 1698.204423][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1698.242078][ T9] usb 9-1: USB disconnect, device number 24 [ 1698.371615][T20036] Bluetooth: hci5: command 0x1003 tx timeout [ 1698.379972][T13828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1698.617139][T20229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.862073][T20036] Bluetooth: hci3: command tx timeout [ 1699.974650][T20229] veth0_vlan: entered promiscuous mode [ 1700.225839][T20229] veth1_vlan: entered promiscuous mode [ 1700.366357][T20325] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1701.125354][T20229] veth0_macvtap: entered promiscuous mode [ 1701.139255][T20229] veth1_macvtap: entered promiscuous mode [ 1701.158291][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.169146][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.179103][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.189704][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.201021][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.221217][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.235589][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.252846][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.291857][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.302987][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.317204][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.328138][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.346727][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.357414][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.374579][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.385572][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.491117][T20229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.606569][ T987] Bluetooth: hci5: Frame reassembly failed (-84) [ 1701.643793][T13828] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 1701.767086][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.862646][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.889380][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.911685][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.922560][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1702.031058][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.213513][ T66] Bluetooth: hci8: Frame reassembly failed (-84) [ 1702.371936][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.395509][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.406679][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.421017][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.432505][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.444524][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.456005][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.466071][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.477604][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.488697][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.499352][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.509357][T20229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.519936][T20229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.521198][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1702.531231][T20229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.592745][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.605274][T20229] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.623944][T20229] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.633046][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1702.641076][T20229] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.651317][T20229] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.656015][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.683555][ T9] usb 5-1: config 0 descriptor?? [ 1702.710222][ T9] hub 5-1:0.0: USB hub found [ 1702.823828][ T1903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.857808][ T1903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.916783][ T1903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.949219][ T1903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.965993][ T9] hub 5-1:0.0: 1 port detected [ 1703.413977][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.583466][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.662806][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 1703.675665][T20036] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1703.803551][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.890051][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.053431][ T12] bridge_slave_1: left allmulticast mode [ 1704.059469][ T12] bridge_slave_1: left promiscuous mode [ 1704.061636][T13828] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1704.065425][T20036] Bluetooth: hci8: command 0x1003 tx timeout [ 1704.105514][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.206452][ T12] bridge_slave_0: left allmulticast mode [ 1704.212465][ T12] bridge_slave_0: left promiscuous mode [ 1704.218292][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.569040][T20341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3929'. [ 1704.625033][T14138] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1704.671043][T20347] netlink: 244 bytes leftover after parsing attributes in process `syz.8.3930'. [ 1705.489871][ T973] usb 5-1: USB disconnect, device number 126 [ 1705.585537][T20036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1705.939846][T20036] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1706.042891][T20036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1706.069445][T20036] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1706.100479][T20036] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1706.107856][T20036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1706.201688][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.225030][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.239948][ T12] bond0 (unregistering): Released all slaves [ 1706.268899][T20338] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.3929'. [ 1706.281080][T20338] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1706.295669][T20341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.131282][T20036] Bluetooth: hci3: command tx timeout [ 1708.705968][T20353] chnl_net:caif_netlink_parms(): no params data found [ 1709.321058][ T12] hsr_slave_0: left promiscuous mode [ 1709.327081][ T12] hsr_slave_1: left promiscuous mode [ 1709.333255][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1709.353352][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.382108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1709.401948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.501040][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1709.575342][ T12] veth1_macvtap: left promiscuous mode [ 1709.582500][ T12] veth0_macvtap: left promiscuous mode [ 1709.588645][ T12] veth1_vlan: left promiscuous mode [ 1709.595046][ T12] veth0_vlan: left promiscuous mode [ 1709.692718][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1709.802721][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.946803][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1709.956774][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.148577][ T9] usb 5-1: config 0 descriptor?? [ 1710.156200][ T9] hub 5-1:0.0: USB hub found [ 1710.299349][T13828] Bluetooth: hci3: command tx timeout [ 1710.413854][ T9] hub 5-1:0.0: 1 port detected [ 1711.320308][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1711.392481][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1712.061088][ T9] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1712.360767][T20353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.381333][T13828] Bluetooth: hci3: command tx timeout [ 1712.387626][T20353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.431344][T20353] bridge_slave_0: entered allmulticast mode [ 1712.451487][T20353] bridge_slave_0: entered promiscuous mode [ 1712.491868][T20353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.498943][T20353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.572440][T20353] bridge_slave_1: entered allmulticast mode [ 1712.601528][T20353] bridge_slave_1: entered promiscuous mode [ 1712.670620][T20353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.723222][T20353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.854477][T20353] team0: Port device team_slave_0 added [ 1712.915951][T20353] team0: Port device team_slave_1 added [ 1712.983720][T20353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.012482][T20353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.079060][T20353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.110553][T20353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.131271][T20353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.202474][T20353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.301375][T20353] hsr_slave_0: entered promiscuous mode [ 1713.319424][T20353] hsr_slave_1: entered promiscuous mode [ 1713.328815][T20353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1713.343427][T20353] Cannot create hsr debugfs directory [ 1713.631593][T19598] usb 5-1: reset high-speed USB device number 127 using dummy_hcd [ 1713.792023][T19598] usb 5-1: device firmware changed [ 1713.798486][T19598] usb 5-1: USB disconnect, device number 127 [ 1713.878056][T20353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1713.893052][T20353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1713.922179][T20353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1713.960972][T20353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1714.067348][T20353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.141126][T19598] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1714.154079][T20353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.165342][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.172459][ T1903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.216610][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.223801][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.341306][T19598] usb 5-1: Using ep0 maxpacket: 32 [ 1714.355710][T19598] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1714.375769][T19598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.444689][T19598] usb 5-1: config 0 descriptor?? [ 1714.506310][T13828] Bluetooth: hci3: command tx timeout [ 1714.616181][T19598] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1715.211279][T19598] gspca_sunplus: reg_w_riv err -71 [ 1715.218607][T19598] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1715.254375][T19598] usb 5-1: USB disconnect, device number 2 [ 1716.353873][T20435] 9pnet_fd: Insufficient options for proto=fd [ 1717.320452][T20353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.770768][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1718.952646][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1718.978635][T20472] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3966'. [ 1718.999002][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.057884][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1719.067923][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.082192][ T9] usb 5-1: config 0 descriptor?? [ 1719.092232][ T9] hub 5-1:0.0: USB hub found [ 1719.199417][T20353] veth0_vlan: entered promiscuous mode [ 1719.229936][T20353] veth1_vlan: entered promiscuous mode [ 1719.315951][T20353] veth0_macvtap: entered promiscuous mode [ 1719.328453][T20353] veth1_macvtap: entered promiscuous mode [ 1719.345126][ T9] hub 5-1:0.0: 1 port detected [ 1719.367573][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.394974][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.415007][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.426317][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.489114][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.507315][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.539348][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.579675][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.599770][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.619271][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.654988][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.668192][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.741074][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.751964][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.763893][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.798871][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.821671][T20353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.884587][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.895658][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.913277][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.966230][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.019220][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.087514][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.121960][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.166177][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.186207][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.216434][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.233991][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.249896][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.273587][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.294323][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.319400][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.339554][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.380661][T20353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.424318][T20353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.442119][T20353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.475707][T20353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.489921][T20353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.500236][T20353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.509383][T20353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.740202][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.757503][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.831353][ T6611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.841095][ T6611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.440271][ T9] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1721.762370][T14138] usb 5-1: USB disconnect, device number 3 [ 1723.491131][ T973] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1723.695174][ T973] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1723.719862][ T973] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.231899][ T973] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1724.241367][ T973] usb 9-1: config 1 has no interface number 1 [ 1724.249505][ T973] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1724.263768][ T973] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1724.948005][ T973] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1724.957230][ T973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.966142][ T973] usb 9-1: Product: syz [ 1724.971027][ T973] usb 9-1: Manufacturer: syz [ 1724.975665][ T973] usb 9-1: SerialNumber: syz [ 1725.073746][ T973] usb 9-1: can't set config #1, error -71 [ 1725.087127][ T973] usb 9-1: USB disconnect, device number 25 [ 1725.487096][T20525] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3981'. [ 1725.600235][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.657607][T20524] netlink: 'syz.4.3980': attribute type 1 has an invalid length. [ 1725.681442][T20524] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3980'. [ 1726.047846][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1726.094878][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1726.128664][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1726.436472][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1726.449532][ T5830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1726.457470][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1726.475337][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.662912][T13828] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1726.875234][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.600258][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.654437][T20544] FAULT_INJECTION: forcing a failure. [ 1727.654437][T20544] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.681157][T20544] CPU: 0 UID: 0 PID: 20544 Comm: syz.3.3987 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1727.691977][T20544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1727.702075][T20544] Call Trace: [ 1727.705345][T20544] [ 1727.708265][T20544] dump_stack_lvl+0x241/0x360 [ 1727.712938][T20544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1727.718125][T20544] ? __pfx__printk+0x10/0x10 [ 1727.722708][T20544] ? __kmalloc_noprof+0xb5/0x4c0 [ 1727.727640][T20544] ? __pfx___might_resched+0x10/0x10 [ 1727.732925][T20544] should_fail_ex+0x3b0/0x4e0 [ 1727.737594][T20544] should_failslab+0xac/0x100 [ 1727.742266][T20544] __kmalloc_noprof+0xdd/0x4c0 [ 1727.747017][T20544] ? __kmalloc_cache_noprof+0x243/0x390 [ 1727.752551][T20544] ? alloc_pipe_info+0x1ff/0x4d0 [ 1727.757484][T20544] alloc_pipe_info+0x1ff/0x4d0 [ 1727.762240][T20544] splice_direct_to_actor+0xa9e/0xc80 [ 1727.767612][T20544] ? __pfx_direct_splice_actor+0x10/0x10 [ 1727.773237][T20544] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1727.779139][T20544] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.785133][T20544] do_splice_direct+0x289/0x3e0 [ 1727.789978][T20544] ? __pfx_do_splice_direct+0x10/0x10 [ 1727.795344][T20544] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1727.801248][T20544] ? bpf_lsm_file_permission+0x9/0x10 [ 1727.806625][T20544] ? security_file_permission+0x74/0x280 [ 1727.812268][T20544] ? rw_verify_area+0x1c3/0x6f0 [ 1727.817135][T20544] do_sendfile+0x564/0x8a0 [ 1727.821577][T20544] ? __pfx_do_sendfile+0x10/0x10 [ 1727.826513][T20544] ? __fget_files+0x2a/0x410 [ 1727.831128][T20544] __se_sys_sendfile64+0x17c/0x1e0 [ 1727.836237][T20544] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1727.841866][T20544] ? do_syscall_64+0x100/0x230 [ 1727.846624][T20544] ? do_syscall_64+0xb6/0x230 [ 1727.851296][T20544] do_syscall_64+0xf3/0x230 [ 1727.855815][T20544] ? clear_bhb_loop+0x35/0x90 [ 1727.860478][T20544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.866365][T20544] RIP: 0033:0x7f791d785d29 [ 1727.870768][T20544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1727.890387][T20544] RSP: 002b:00007f791e594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1727.898790][T20544] RAX: ffffffffffffffda RBX: 00007f791d976080 RCX: 00007f791d785d29 [ 1727.906768][T20544] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 1727.914733][T20544] RBP: 00007f791e594090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.922692][T20544] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 1727.930664][T20544] R13: 0000000000000000 R14: 00007f791d976080 R15: 00007fffb883b2b8 [ 1727.938654][T20544] [ 1728.123855][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3990'. [ 1728.856476][T13828] Bluetooth: hci5: command tx timeout [ 1729.128917][T20562] netlink: 'syz.3.3993': attribute type 10 has an invalid length. [ 1729.137189][ T12] bridge_slave_1: left allmulticast mode [ 1729.144731][ T12] bridge_slave_1: left promiscuous mode [ 1729.150498][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.247675][ T12] bridge_slave_0: left allmulticast mode [ 1729.319664][ T12] bridge_slave_0: left promiscuous mode [ 1729.329892][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.782037][T20575] 9pnet_fd: Insufficient options for proto=fd [ 1730.317092][T20581] overlayfs: invalid redirect ((null)) [ 1730.324199][T20581] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3997'. [ 1730.693825][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.702079][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.711676][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.741787][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.774765][ T12] bond0 (unregistering): Released all slaves [ 1730.822513][T20562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.865253][T20562] bond0: (slave team0): Enslaving as an active interface with an up link [ 1730.931305][T13828] Bluetooth: hci5: command tx timeout [ 1731.113594][T20530] chnl_net:caif_netlink_parms(): no params data found [ 1732.569757][T20530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.724359][T20530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.821598][T20530] bridge_slave_0: entered allmulticast mode [ 1732.840443][T20530] bridge_slave_0: entered promiscuous mode [ 1732.996841][T20530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.031294][T13828] Bluetooth: hci5: command tx timeout [ 1733.061909][T20530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.069295][T20530] bridge_slave_1: entered allmulticast mode [ 1733.077691][T20530] bridge_slave_1: entered promiscuous mode [ 1733.151129][T20605] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4002'. [ 1733.288812][T20530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.314244][ T12] hsr_slave_0: left promiscuous mode [ 1733.321818][ T12] hsr_slave_1: left promiscuous mode [ 1733.328679][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.359240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.378543][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.401218][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.457392][ T12] veth1_macvtap: left promiscuous mode [ 1733.491105][ T12] veth0_macvtap: left promiscuous mode [ 1733.496769][ T12] veth1_vlan: left promiscuous mode [ 1733.516018][ T12] veth0_vlan: left promiscuous mode [ 1734.638245][T11733] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1734.871036][T11733] usb 10-1: Using ep0 maxpacket: 8 [ 1734.900332][T11733] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1734.915220][T11733] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1734.925063][T11733] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.947424][T11733] usb 10-1: Product: syz [ 1734.951824][T11733] usb 10-1: Manufacturer: syz [ 1734.956521][T11733] usb 10-1: SerialNumber: syz [ 1734.976717][T11733] usb 10-1: config 0 descriptor?? [ 1734.994851][T11733] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1735.109998][T13828] Bluetooth: hci5: command tx timeout [ 1735.289063][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1735.354904][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1735.837167][T20625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.866658][T20625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.889729][T13828] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 1735.889762][T13828] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 1735.897310][T13828] Bluetooth: hci1: Unknown advertising packet type: 0x32 [ 1735.904449][T13828] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1735.934076][T11733] gspca_zc3xx: reg_w_i err -71 [ 1736.276043][T20530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.321875][T20614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1736.422263][T20629] FAULT_INJECTION: forcing a failure. [ 1736.422263][T20629] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.435568][T20629] CPU: 1 UID: 0 PID: 20629 Comm: syz.4.4011 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1736.446368][T20629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1736.456448][T20629] Call Trace: [ 1736.459740][T20629] [ 1736.462686][T20629] dump_stack_lvl+0x241/0x360 [ 1736.467389][T20629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1736.472607][T20629] ? __pfx__printk+0x10/0x10 [ 1736.477224][T20629] should_fail_ex+0x3b0/0x4e0 [ 1736.481919][T20629] should_failslab+0xac/0x100 [ 1736.486616][T20629] ? radix_tree_node_alloc+0x8b/0x3c0 [ 1736.492003][T20629] kmem_cache_alloc_noprof+0x70/0x380 [ 1736.497406][T20629] radix_tree_node_alloc+0x8b/0x3c0 [ 1736.502628][T20629] idr_get_free+0x296/0xab0 [ 1736.507156][T20629] idr_alloc_u32+0x195/0x330 [ 1736.511780][T20629] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1736.516910][T20629] ? l2tp_tunnel_register+0x138/0x1b10 [ 1736.522376][T20629] l2tp_tunnel_register+0x15a/0x1b10 [ 1736.527683][T20629] ? lockdep_hardirqs_on+0x99/0x150 [ 1736.532889][T20629] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1736.539217][T20629] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 1736.544949][T20629] ? __asan_memset+0x23/0x50 [ 1736.549549][T20629] ? lockdep_init_map_type+0xa1/0x910 [ 1736.554917][T20629] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1736.560729][T20629] ? __kasan_kmalloc+0x98/0xb0 [ 1736.565498][T20629] ? l2tp_tunnel_create+0x258/0x400 [ 1736.570690][T20629] ? l2tp_tunnel_create+0x2d4/0x400 [ 1736.575886][T20629] pppol2tp_connect+0x925/0x1940 [ 1736.580829][T20629] ? __pfx_pppol2tp_connect+0x10/0x10 [ 1736.586197][T20629] ? tomoyo_socket_connect_permission+0x1d0/0x370 [ 1736.592626][T20629] __sys_connect+0x288/0x2d0 [ 1736.597210][T20629] ? __fget_files+0x2a/0x410 [ 1736.601795][T20629] ? __pfx___sys_connect+0x10/0x10 [ 1736.606909][T20629] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1736.613230][T20629] ? do_syscall_64+0x100/0x230 [ 1736.617993][T20629] __x64_sys_connect+0x7a/0x90 [ 1736.622755][T20629] do_syscall_64+0xf3/0x230 [ 1736.627257][T20629] ? clear_bhb_loop+0x35/0x90 [ 1736.632017][T20629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.637916][T20629] RIP: 0033:0x7f4f29d85d29 [ 1736.642329][T20629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.661932][T20629] RSP: 002b:00007f4f29bf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1736.670340][T20629] RAX: ffffffffffffffda RBX: 00007f4f29f75fa0 RCX: 00007f4f29d85d29 [ 1736.678306][T20629] RDX: 0000000000000026 RSI: 0000000020000040 RDI: 0000000000000003 [ 1736.686269][T20629] RBP: 00007f4f29bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.694235][T20629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.702197][T20629] R13: 0000000000000000 R14: 00007f4f29f75fa0 R15: 00007ffef22c9a08 [ 1736.710172][T20629] [ 1736.770240][T11733] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1736.789381][T11733] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1736.958618][T11733] usb 10-1: USB disconnect, device number 76 [ 1736.978335][T20530] team0: Port device team_slave_0 added [ 1737.121453][T20530] team0: Port device team_slave_1 added [ 1737.553257][T20530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.581017][T20530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1737.629819][T20530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.649326][T20530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.657111][T20530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1737.702031][T20530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.838732][T20530] hsr_slave_0: entered promiscuous mode [ 1737.856387][T20530] hsr_slave_1: entered promiscuous mode [ 1737.865315][T20530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1737.873211][T20530] Cannot create hsr debugfs directory [ 1738.152880][T20656] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4020'. [ 1738.663780][T20530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1738.720442][T20530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1738.744306][T20530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1738.798644][T20530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1739.753967][T20530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.792500][T20530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1739.828263][T19485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.835657][T19485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1739.941815][T19485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.949016][T19485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1740.653598][T20668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4023'. [ 1741.292025][T20530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.664535][T20693] Invalid source name [ 1742.787200][T20530] veth0_vlan: entered promiscuous mode [ 1742.814431][T20530] veth1_vlan: entered promiscuous mode [ 1742.857040][T20530] veth0_macvtap: entered promiscuous mode [ 1742.875536][T20530] veth1_macvtap: entered promiscuous mode [ 1742.893716][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.904332][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.914269][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.931072][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.941008][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.951604][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.961072][T17215] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1742.961503][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.979688][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.990254][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.001485][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.013761][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.024959][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.040990][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.053208][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.069400][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.091035][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.131383][T20530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1743.241263][T17215] usb 10-1: Using ep0 maxpacket: 32 [ 1743.244499][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.274269][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.291562][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.314824][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.329197][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.339551][T17215] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.341760][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.385063][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.442426][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.454023][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.470471][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.472913][T17215] usb 10-1: config 0 has no interfaces? [ 1743.483216][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.521747][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.529497][T17215] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1743.542318][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.553168][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.555863][T17215] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.578782][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.594228][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.642030][T20530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1743.725847][T20530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.797718][T20530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.801477][T17215] usb 10-1: config 0 descriptor?? [ 1743.809189][T20530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.831263][T20530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.870980][T20530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.879744][T20530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.465844][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.787692][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.810857][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.818997][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.900605][T20715] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 1745.011377][T11733] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1745.201287][T11733] usb 9-1: Using ep0 maxpacket: 32 [ 1745.208440][T11733] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1745.220202][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.240597][T11733] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.267046][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.277067][T11733] usb 9-1: config 0 descriptor?? [ 1745.284323][T11733] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1745.396169][ T8326] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.717904][ T8326] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.864249][ T8326] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.202976][T11733] gspca_sunplus: reg_r err -110 [ 1746.208238][T11733] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 1746.230425][T20729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.239799][T20729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.455095][T14138] usb 9-1: USB disconnect, device number 26 [ 1746.515109][ T8326] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.734473][ T5953] usb 10-1: USB disconnect, device number 77 [ 1747.704433][ T8326] bridge_slave_1: left allmulticast mode [ 1747.711302][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1747.723011][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1747.734181][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1747.742050][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1747.749635][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1747.757008][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1747.799062][ T8326] bridge_slave_1: left promiscuous mode [ 1748.061345][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.081183][ T8326] bridge_slave_0: left allmulticast mode [ 1748.112349][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4040'. [ 1748.144598][T20754] netlink: 'syz.4.4040': attribute type 30 has an invalid length. [ 1748.165140][ T8326] bridge_slave_0: left promiscuous mode [ 1748.182102][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.131478][ T25] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1749.298048][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1749.315435][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 18273, setting to 1024 [ 1749.351334][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1749.365254][ T8326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1749.376363][ T25] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1749.389971][ T8326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.396084][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.416038][ T25] usb 10-1: config 0 descriptor?? [ 1749.417574][ T8326] bond0 (unregistering): Released all slaves [ 1749.529112][T20761] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1749.822895][T13828] Bluetooth: hci3: command tx timeout [ 1749.996200][T20776] FAULT_INJECTION: forcing a failure. [ 1749.996200][T20776] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.009533][T20776] CPU: 0 UID: 0 PID: 20776 Comm: syz.4.4047 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1750.020327][T20776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1750.030387][T20776] Call Trace: [ 1750.033673][T20776] [ 1750.036607][T20776] dump_stack_lvl+0x241/0x360 [ 1750.041312][T20776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1750.046513][T20776] ? __pfx__printk+0x10/0x10 [ 1750.051109][T20776] ? __kmalloc_noprof+0xb5/0x4c0 [ 1750.056059][T20776] ? __pfx___might_resched+0x10/0x10 [ 1750.061360][T20776] should_fail_ex+0x3b0/0x4e0 [ 1750.066051][T20776] should_failslab+0xac/0x100 [ 1750.070740][T20776] __kmalloc_noprof+0xdd/0x4c0 [ 1750.075521][T20776] ? sock_kmalloc+0xd7/0x160 [ 1750.080128][T20776] sock_kmalloc+0xd7/0x160 [ 1750.084539][T20776] ip_mc_source+0x78f/0x10c0 [ 1750.089154][T20776] ? __pfx_ip_mc_source+0x10/0x10 [ 1750.094180][T20776] ? __might_fault+0xc6/0x120 [ 1750.098883][T20776] do_mcast_group_source+0x647/0x8e0 [ 1750.104176][T20776] ? __pfx_do_mcast_group_source+0x10/0x10 [ 1750.109985][T20776] ? mark_lock+0x9a/0x360 [ 1750.114318][T20776] ? __lock_acquire+0x1397/0x2100 [ 1750.119386][T20776] ? __local_bh_enable_ip+0x168/0x200 [ 1750.124768][T20776] ? do_ip_setsockopt+0x1a2d/0x3cd0 [ 1750.129957][T20776] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1750.135699][T20776] do_ip_setsockopt+0x1f36/0x3cd0 [ 1750.140718][T20776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1750.146712][T20776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1750.153060][T20776] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1750.158449][T20776] ? irqentry_exit+0x63/0x90 [ 1750.163052][T20776] ? lockdep_hardirqs_on+0x99/0x150 [ 1750.168258][T20776] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1750.174157][T20776] ? sock_common_setsockopt+0x72/0xc0 [ 1750.179541][T20776] ip_setsockopt+0x63/0x100 [ 1750.184064][T20776] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1750.189979][T20776] do_sock_setsockopt+0x3af/0x720 [ 1750.195025][T20776] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1750.200584][T20776] ? __fget_files+0x395/0x410 [ 1750.205274][T20776] ? __fget_files+0x2a/0x410 [ 1750.209881][T20776] __x64_sys_setsockopt+0x1ee/0x280 [ 1750.215083][T20776] do_syscall_64+0xf3/0x230 [ 1750.219600][T20776] ? clear_bhb_loop+0x35/0x90 [ 1750.224283][T20776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.230190][T20776] RIP: 0033:0x7f4f29d85d29 [ 1750.234699][T20776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1750.254325][T20776] RSP: 002b:00007f4f29bd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1750.262752][T20776] RAX: ffffffffffffffda RBX: 00007f4f29f76080 RCX: 00007f4f29d85d29 [ 1750.270712][T20776] RDX: 000000000000002b RSI: 0000000000000000 RDI: 0000000000000006 [ 1750.278682][T20776] RBP: 00007f4f29bd8090 R08: 0000000000000108 R09: 0000000000000000 [ 1750.286664][T20776] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1750.294647][T20776] R13: 0000000000000000 R14: 00007f4f29f76080 R15: 00007ffef22c9a08 [ 1750.302643][T20776] [ 1750.797437][T20761] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4043'. [ 1751.357134][T20785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1751.891103][ T9888] Bluetooth: hci3: command 0x041b tx timeout [ 1751.922014][T20782] gre1: entered promiscuous mode [ 1751.927040][T20782] gre1: entered allmulticast mode [ 1752.167448][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 1752.173766][ T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1752.224084][ T25] usb 10-1: USB disconnect, device number 78 [ 1752.481346][T11733] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1752.671176][T11733] usb 5-1: Using ep0 maxpacket: 32 [ 1752.806907][T20742] chnl_net:caif_netlink_parms(): no params data found [ 1752.895665][T11733] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.928373][T11733] usb 5-1: config 0 has no interfaces? [ 1752.951998][T20794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1752.968141][ T8326] hsr_slave_0: left promiscuous mode [ 1752.976461][T11733] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1753.011610][T11733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.023485][T11733] usb 5-1: config 0 descriptor?? [ 1753.037335][ T8326] hsr_slave_1: left promiscuous mode [ 1753.054741][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.064000][ T8326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.078773][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.087596][ T8326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.192275][ T8326] veth1_macvtap: left promiscuous mode [ 1753.201000][ T8326] veth0_macvtap: left promiscuous mode [ 1753.206627][ T8326] veth1_vlan: left promiscuous mode [ 1753.214257][ T8326] veth0_vlan: left promiscuous mode [ 1753.407378][ T5830] Bluetooth: hci6: command 0x0406 tx timeout [ 1753.420627][ T5830] Bluetooth: hci7: command 0x0406 tx timeout [ 1753.973432][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 1755.092013][T20825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.120495][T20825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.171004][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 1756.219867][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 1756.504281][ T8326] team0 (unregistering): Port device team_slave_1 removed [ 1756.562460][ T8326] team0 (unregistering): Port device team_slave_0 removed [ 1757.100064][ T25] usb 5-1: USB disconnect, device number 4 [ 1757.218233][T19598] IPVS: starting estimator thread 0... [ 1757.522342][T20832] IPVS: using max 20 ests per chain, 48000 per kthread [ 1758.302276][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 1759.035380][T20742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.043418][T20742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.291434][T20742] bridge_slave_0: entered allmulticast mode [ 1759.298842][T20742] bridge_slave_0: entered promiscuous mode [ 1759.318023][T20742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.346806][T20742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.415368][T20742] bridge_slave_1: entered allmulticast mode [ 1759.449888][T20742] bridge_slave_1: entered promiscuous mode [ 1759.974098][T20865] FAULT_INJECTION: forcing a failure. [ 1759.974098][T20865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.988481][T20865] CPU: 0 UID: 0 PID: 20865 Comm: syz.9.4064 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1759.999280][T20865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1760.009348][T20865] Call Trace: [ 1760.012638][T20865] [ 1760.015584][T20865] dump_stack_lvl+0x241/0x360 [ 1760.020285][T20865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1760.025499][T20865] ? __pfx__printk+0x10/0x10 [ 1760.030107][T20865] ? snprintf+0xda/0x120 [ 1760.034369][T20865] should_fail_ex+0x3b0/0x4e0 [ 1760.039069][T20865] _copy_to_user+0x31/0xb0 [ 1760.043508][T20865] simple_read_from_buffer+0xca/0x150 [ 1760.048902][T20865] proc_fail_nth_read+0x1e9/0x250 [ 1760.053947][T20865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1760.059508][T20865] ? rw_verify_area+0x2ee/0x6f0 [ 1760.064375][T20865] ? rw_verify_area+0x55e/0x6f0 [ 1760.069240][T20865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1760.074804][T20865] vfs_read+0x1fc/0xb70 [ 1760.078979][T20865] ? __pfx___mutex_lock+0x10/0x10 [ 1760.084029][T20865] ? __pfx_vfs_read+0x10/0x10 [ 1760.088738][T20865] ? __fget_files+0x2a/0x410 [ 1760.093348][T20865] ? __fget_files+0x395/0x410 [ 1760.098033][T20865] ? __fget_files+0x2a/0x410 [ 1760.102649][T20865] ksys_read+0x18f/0x2b0 [ 1760.106935][T20865] ? __pfx_ksys_read+0x10/0x10 [ 1760.111716][T20865] ? do_syscall_64+0x100/0x230 [ 1760.116500][T20865] ? do_syscall_64+0xb6/0x230 [ 1760.121194][T20865] do_syscall_64+0xf3/0x230 [ 1760.125715][T20865] ? clear_bhb_loop+0x35/0x90 [ 1760.130405][T20865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.136312][T20865] RIP: 0033:0x7ff1bd58473c [ 1760.140740][T20865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1760.160361][T20865] RSP: 002b:00007ff1be348030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1760.168790][T20865] RAX: ffffffffffffffda RBX: 00007ff1bd776160 RCX: 00007ff1bd58473c [ 1760.176774][T20865] RDX: 000000000000000f RSI: 00007ff1be3480a0 RDI: 000000000000000d [ 1760.184754][T20865] RBP: 00007ff1be348090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.192746][T20865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.200733][T20865] R13: 0000000000000000 R14: 00007ff1bd776160 R15: 00007ffc80730648 [ 1760.208739][T20865] [ 1760.211855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1760.560447][T20742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.432247][T20742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1762.599312][T20875] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4067'. [ 1762.827455][ T29] audit: type=1326 audit(1736466963.128:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20870 comm="syz.9.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd585d29 code=0x7ffc0000 [ 1762.924240][ T29] audit: type=1326 audit(1736466963.128:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20870 comm="syz.9.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd585d29 code=0x7ffc0000 [ 1762.946874][ T29] audit: type=1326 audit(1736466963.138:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20870 comm="syz.9.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1bd585d29 code=0x7ffc0000 [ 1763.166679][ T29] audit: type=1326 audit(1736466963.138:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20870 comm="syz.9.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd585d29 code=0x7ffc0000 [ 1763.191530][T20876] ip6t_srh: unknown srh match flags 4000 [ 1763.197672][ T29] audit: type=1326 audit(1736466963.138:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20870 comm="syz.9.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bd585d29 code=0x7ffc0000 [ 1763.326076][T20875] batadv1: entered promiscuous mode [ 1763.331783][T20875] batadv1: entered allmulticast mode [ 1763.437979][T20742] team0: Port device team_slave_0 added [ 1763.488497][T20742] team0: Port device team_slave_1 added [ 1763.588394][T20742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1763.598989][T20742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.641984][ T29] audit: type=1326 audit(1736466964.038:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20888 comm="syz.3.4073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f791d785d29 code=0x0 [ 1763.664381][T20742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.691960][T20742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.699148][T20742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.742259][T20742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.818513][ T5953] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1763.851066][T19598] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1763.874168][T20742] hsr_slave_0: entered promiscuous mode [ 1763.882651][T20742] hsr_slave_1: entered promiscuous mode [ 1763.889030][T20742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1763.897036][ T25] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1763.906244][T20742] Cannot create hsr debugfs directory [ 1764.021841][T19598] usb 5-1: Using ep0 maxpacket: 32 [ 1764.029092][T19598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.046693][T19598] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1764.091178][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 1764.100397][ T25] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1764.112256][T19598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.133932][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.154263][T19598] usb 5-1: config 0 descriptor?? [ 1764.176292][ T25] usb 10-1: config 0 descriptor?? [ 1764.192322][T19598] hub 5-1:0.0: USB hub found [ 1764.205389][ T25] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1764.416445][T19598] hub 5-1:0.0: 1 port detected [ 1764.481773][ T5953] usb 9-1: Using ep0 maxpacket: 32 [ 1764.501078][ T5953] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.535253][ T5953] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1764.560974][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.569030][ T5953] usb 9-1: Product: syz [ 1764.578935][ T5953] usb 9-1: Manufacturer: syz [ 1764.585764][ T5953] usb 9-1: SerialNumber: syz [ 1764.606864][ T5953] usb 9-1: config 0 descriptor?? [ 1764.629722][ T25] gspca_sunplus: reg_w_riv err -71 [ 1764.635387][ T25] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1764.651666][ T25] usb 10-1: USB disconnect, device number 79 [ 1764.850445][T20742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1764.869171][T20742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1764.885104][T20742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1764.901710][T20742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1764.970485][T20884] tap0: tun_chr_ioctl cmd 1074025677 [ 1764.979811][T20884] tap0: linktype set to 6 [ 1765.069322][T20742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.079821][T20884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4069'. [ 1765.107840][T20742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.138825][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.146060][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.179159][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.186404][ T8326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.607118][T20742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.065162][T20742] veth0_vlan: entered promiscuous mode [ 1766.067133][ T25] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1766.077914][T20742] veth1_vlan: entered promiscuous mode [ 1766.149223][T20742] veth0_macvtap: entered promiscuous mode [ 1766.173218][T20742] veth1_macvtap: entered promiscuous mode [ 1766.217228][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.242247][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.252799][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.263885][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.274126][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.284882][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.295385][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.306186][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.342964][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.376951][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.410561][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.445345][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.457803][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.468411][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.478299][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.489406][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.500654][T20742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1767.125723][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1767.253117][ T5953] usb 5-1: USB disconnect, device number 5 [ 1767.297978][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1767.371218][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1767.381874][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1767.392074][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1767.403508][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1767.431022][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1767.493694][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1767.896540][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.195494][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.231148][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.278927][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.289327][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.302552][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.312544][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.327870][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.341333][T20742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1768.351986][T20742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1768.363915][T20742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.375431][T20742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.529013][T20742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.778658][T20742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.008931][T20742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.413207][ T5871] usb 9-1: USB disconnect, device number 27 [ 1769.492381][T20936] FAULT_INJECTION: forcing a failure. [ 1769.492381][T20936] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.575446][T20936] CPU: 1 UID: 0 PID: 20936 Comm: syz.8.4082 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1769.586279][T20936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1769.596339][T20936] Call Trace: [ 1769.599722][T20936] [ 1769.602676][T20936] dump_stack_lvl+0x241/0x360 [ 1769.607390][T20936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1769.612628][T20936] ? __pfx__printk+0x10/0x10 [ 1769.617249][T20936] ? fs_reclaim_acquire+0x93/0x130 [ 1769.622384][T20936] ? __pfx___might_resched+0x10/0x10 [ 1769.627694][T20936] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1769.633708][T20936] should_fail_ex+0x3b0/0x4e0 [ 1769.638419][T20936] should_failslab+0xac/0x100 [ 1769.643127][T20936] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 1769.649459][T20936] ? smk_import_entry+0x500/0x610 [ 1769.654486][T20936] ? smk_import_entry+0x18d/0x610 [ 1769.659524][T20936] kstrndup+0x41/0xb0 [ 1769.663506][T20936] smk_import_entry+0x18d/0x610 [ 1769.668358][T20936] smk_fill_rule+0xaa/0x630 [ 1769.672864][T20936] smk_parse_long_rule+0x617/0x7e0 [ 1769.678000][T20936] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 1769.683647][T20936] ? __might_fault+0xaa/0x120 [ 1769.688337][T20936] ? _copy_from_user+0x99/0xc0 [ 1769.693116][T20936] smk_write_rules_list+0x2f9/0x450 [ 1769.698328][T20936] ? __pfx_smk_write_rules_list+0x10/0x10 [ 1769.704053][T20936] ? smack_privileged_cred+0xb9/0x380 [ 1769.709427][T20936] ? __pfx_smk_write_change_rule+0x10/0x10 [ 1769.715244][T20936] vfs_write+0x2a3/0xd30 [ 1769.719494][T20936] ? __pfx_vfs_write+0x10/0x10 [ 1769.724259][T20936] ? __fget_files+0x2a/0x410 [ 1769.728842][T20936] ? __fget_files+0x395/0x410 [ 1769.733517][T20936] ? __fget_files+0x2a/0x410 [ 1769.738110][T20936] ksys_write+0x18f/0x2b0 [ 1769.742439][T20936] ? __pfx_ksys_write+0x10/0x10 [ 1769.747286][T20936] ? do_syscall_64+0x100/0x230 [ 1769.752053][T20936] ? do_syscall_64+0xb6/0x230 [ 1769.756727][T20936] do_syscall_64+0xf3/0x230 [ 1769.761231][T20936] ? clear_bhb_loop+0x35/0x90 [ 1769.765900][T20936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.771792][T20936] RIP: 0033:0x7fbaf9585d29 [ 1769.776217][T20936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.795827][T20936] RSP: 002b:00007fbafa2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1769.804330][T20936] RAX: ffffffffffffffda RBX: 00007fbaf9775fa0 RCX: 00007fbaf9585d29 [ 1769.812305][T20936] RDX: 0000000000000026 RSI: 0000000020000000 RDI: 0000000000000003 [ 1769.820282][T20936] RBP: 00007fbafa2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.828252][T20936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1769.836219][T20936] R13: 0000000000000000 R14: 00007fbaf9775fa0 R15: 00007ffd23989658 [ 1769.844200][T20936] [ 1769.858708][ T30] INFO: task syz.2.3742:19609 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1769.871446][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1769.879128][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1769.894082][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.908682][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.916712][ T30] task:syz.2.3742 state:D stack:23544 pid:19609 tgid:19608 ppid:16217 flags:0x00004004 [ 1769.933252][ T30] Call Trace: [ 1769.936572][ T30] [ 1769.939525][ T30] __schedule+0x17fb/0x4be0 [ 1769.944185][ T30] ? __pfx___schedule+0x10/0x10 [ 1769.949066][ T30] ? __pfx_lock_release+0x10/0x10 [ 1769.954231][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1769.960234][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1769.966753][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1769.971801][ T5953] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1769.972096][ T30] ? schedule+0x90/0x320 [ 1769.983668][ T30] schedule+0x14b/0x320 [ 1769.987863][ T30] ? down_read+0x6a5/0xa40 [ 1769.992376][ T30] schedule_preempt_disabled+0x13/0x30 [ 1769.997864][ T30] down_read+0x705/0xa40 [ 1770.002287][ T30] ? __pfx_down_read+0x10/0x10 [ 1770.007091][ T30] super_lock+0x27c/0x400 [ 1770.011529][ T30] ? __pfx_lock_release+0x10/0x10 [ 1770.017707][ T30] ? __pfx_super_lock+0x10/0x10 [ 1770.022789][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1770.028046][ T30] iterate_supers+0x8c/0x190 [ 1770.032802][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 1770.038041][ T30] __se_sys_quotactl+0x38e/0xa30 [ 1770.043097][ T30] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1770.048582][ T30] ? do_syscall_64+0x100/0x230 [ 1770.053450][ T30] ? do_syscall_64+0xb6/0x230 [ 1770.058162][ T30] do_syscall_64+0xf3/0x230 [ 1770.062743][ T30] ? clear_bhb_loop+0x35/0x90 [ 1770.067442][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.073416][ T30] RIP: 0033:0x7fa41c385d29 [ 1770.077864][ T30] RSP: 002b:00007fa41d145038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1770.086372][ T30] RAX: ffffffffffffffda RBX: 00007fa41c575fa0 RCX: 00007fa41c385d29 [ 1770.094424][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 1770.102454][ T30] RBP: 00007fa41c401b08 R08: 0000000000000000 R09: 0000000000000000 [ 1770.110451][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.118556][ T30] R13: 0000000000000000 R14: 00007fa41c575fa0 R15: 00007ffd82b67348 [ 1770.127292][ T30] [ 1770.130376][ T30] [ 1770.130376][ T30] Showing all locks held in the system: [ 1770.138653][ T30] 1 lock held by khungtaskd/30: [ 1770.143617][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1770.153742][ T30] 3 locks held by kworker/u8:3/52: [ 1770.158915][ T30] 2 locks held by getty/5576: [ 1770.163659][ T30] #0: ffff8880315830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1770.164941][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 1770.173522][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1770.173597][ T30] 5 locks held by kworker/0:8/5953: [ 1770.173609][ T30] #0: ffff8881442b8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1770.173665][ T30] #1: ffffc9000489fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1770.223053][ T30] #2: ffff888144f3d190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 1770.232073][ T30] #3: ffff888144f50510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 1770.242122][ T30] #4: ffff8881443d7268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 1770.251881][ T30] 1 lock held by syz-executor/14583: [ 1770.257186][ T30] #0: ffff88804c10e0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 1770.267475][ T30] 1 lock held by syz-executor/18275: [ 1770.272833][ T30] 3 locks held by kworker/1:8/19598: [ 1770.278133][ T30] 1 lock held by syz.2.3742/19609: [ 1770.283301][ T30] #0: ffff88804c10e0e0 (&type->s_umount_key#53){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 1770.293639][ T30] 2 locks held by syz-executor/19711: [ 1770.299034][ T30] 1 lock held by syz-executor/19714: [ 1770.304492][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 1770.315468][ T30] 3 locks held by kworker/0:5/20200: [ 1770.320770][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1770.332624][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 1770.344767][ T30] #2: ffff888142f38240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2d1/0x4130 [ 1770.355011][ T30] 1 lock held by syz.4.4084/20939: [ 1770.360134][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1770.371605][ T30] 2 locks held by syz.3.4085/20944: [ 1770.376875][ T30] [ 1770.379216][ T30] ============================================= [ 1770.379216][ T30] [ 1770.387908][ T30] NMI backtrace for cpu 1 [ 1770.392254][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1770.402774][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1770.412860][ T30] Call Trace: [ 1770.416161][ T30] [ 1770.419109][ T30] dump_stack_lvl+0x241/0x360 [ 1770.423911][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.429150][ T30] ? __pfx__printk+0x10/0x10 [ 1770.433781][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1770.438746][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1770.444220][ T30] ? _printk+0xd5/0x120 [ 1770.448399][ T30] ? __pfx__printk+0x10/0x10 [ 1770.453001][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1770.457864][ T30] ? __pfx__printk+0x10/0x10 [ 1770.462460][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1770.467487][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1770.473481][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1770.479473][ T30] watchdog+0xff6/0x1040 [ 1770.483722][ T30] ? watchdog+0x1ea/0x1040 [ 1770.488139][ T30] ? __pfx_watchdog+0x10/0x10 [ 1770.492812][ T30] kthread+0x2f0/0x390 [ 1770.496877][ T30] ? __pfx_watchdog+0x10/0x10 [ 1770.501554][ T30] ? __pfx_kthread+0x10/0x10 [ 1770.506571][ T30] ret_from_fork+0x4b/0x80 [ 1770.510987][ T30] ? __pfx_kthread+0x10/0x10 [ 1770.515575][ T30] ret_from_fork_asm+0x1a/0x30 [ 1770.520342][ T30] [ 1770.524803][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1770.531596][ C0] NMI backtrace for cpu 0 [ 1770.531610][ C0] CPU: 0 UID: 0 PID: 5871 Comm: kworker/0:4 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1770.531631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1770.531641][ C0] Workqueue: events delayed_vfree_work [ 1770.531666][ C0] RIP: 0010:__lock_acquire+0x6b7/0x2100 [ 1770.531686][ C0] Code: 12 00 00 4a 8d 04 ee 48 89 44 24 38 40 84 ed 4c 8b 6c 24 40 0f 84 7e 04 00 00 0f b6 1b 41 0f b6 04 16 84 c0 0f 85 64 12 00 00 <41> f6 47 01 80 0f 85 63 04 00 00 4c 89 64 24 48 84 db 40 0f b6 c5 [ 1770.531702][ C0] RSP: 0018:ffffc900041ff690 EFLAGS: 00000046 [ 1770.531716][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aba87 [ 1770.531728][ C0] RDX: dffffc0000000000 RSI: ffff888060eda8e0 RDI: ffffffff94271880 [ 1770.531741][ C0] RBP: 0000000000000002 R08: ffffffff94271887 R09: 1ffffffff284e310 [ 1770.531753][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: ffff888060eda8c4 [ 1770.531766][ C0] R13: ffff888060ed9e00 R14: 1ffff1100c1db52a R15: ffff888060eda950 [ 1770.531779][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1770.531793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1770.531805][ C0] CR2: 000000002001e000 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1770.531826][ C0] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 1770.531837][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1770.531848][ C0] Call Trace: [ 1770.531854][ C0] [ 1770.531861][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1770.531880][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1770.531898][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1770.531922][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1770.531942][ C0] ? nmi_handle+0x14f/0x5a0 [ 1770.531959][ C0] ? nmi_handle+0x2a/0x5a0 [ 1770.531974][ C0] ? __lock_acquire+0x6b7/0x2100 [ 1770.531990][ C0] ? default_do_nmi+0x63/0x160 [ 1770.532008][ C0] ? exc_nmi+0x123/0x1f0 [ 1770.532023][ C0] ? end_repeat_nmi+0xf/0x53 [ 1770.532042][ C0] ? __lock_acquire+0x5b7/0x2100 [ 1770.532058][ C0] ? __lock_acquire+0x6b7/0x2100 [ 1770.532074][ C0] ? __lock_acquire+0x6b7/0x2100 [ 1770.532091][ C0] ? __lock_acquire+0x6b7/0x2100 [ 1770.532106][ C0] [ 1770.532113][ C0] [ 1770.532121][ C0] ? ip6_finish_output2+0x63a/0x17b0 [ 1770.532139][ C0] ? ip6_finish_output2+0x1373/0x17b0 [ 1770.532158][ C0] lock_acquire+0x1ed/0x550 [ 1770.532173][ C0] ? debug_check_no_obj_freed+0x234/0x580 [ 1770.532195][ C0] ? mark_lock+0x9a/0x360 [ 1770.532213][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1770.532228][ C0] ? mark_lock+0x9a/0x360 [ 1770.532246][ C0] ? __lock_acquire+0x1397/0x2100 [ 1770.532267][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 1770.532285][ C0] ? debug_check_no_obj_freed+0x234/0x580 [ 1770.532305][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1770.532328][ C0] debug_check_no_obj_freed+0x234/0x580 [ 1770.532349][ C0] ? __pfx_lock_release+0x10/0x10 [ 1770.532364][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1770.532385][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1770.532409][ C0] ? find_unlink_vmap_area+0x2b6/0x2d0 [ 1770.532428][ C0] remove_vm_area+0x1d3/0x300 [ 1770.532445][ C0] ? process_scheduled_works+0x976/0x1840 [ 1770.532466][ C0] vfree+0x7f/0x360 [ 1770.532483][ C0] ? process_scheduled_works+0x976/0x1840 [ 1770.532502][ C0] delayed_vfree_work+0x56/0x80 [ 1770.532521][ C0] process_scheduled_works+0xa66/0x1840 [ 1770.532550][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1770.532573][ C0] ? assign_work+0x364/0x3d0 [ 1770.532594][ C0] worker_thread+0x870/0xd30 [ 1770.532614][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1770.532630][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1770.532645][ C0] kthread+0x2f0/0x390 [ 1770.532661][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1770.532675][ C0] ? __pfx_kthread+0x10/0x10 [ 1770.532691][ C0] ret_from_fork+0x4b/0x80 [ 1770.532705][ C0] ? __pfx_kthread+0x10/0x10 [ 1770.532721][ C0] ret_from_fork_asm+0x1a/0x30 [ 1770.532745][ C0] [ 1770.533846][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1770.930678][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1770.941178][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1770.951239][ T30] Call Trace: [ 1770.954515][ T30] [ 1770.957437][ T30] dump_stack_lvl+0x241/0x360 [ 1770.962122][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.967315][ T30] ? __pfx__printk+0x10/0x10 [ 1770.971894][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1770.977871][ T30] ? vscnprintf+0x5d/0x90 [ 1770.982197][ T30] panic+0x349/0x880 [ 1770.986087][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1770.992238][ T30] ? __pfx_panic+0x10/0x10 [ 1770.996648][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1771.002024][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1771.007563][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1771.012929][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1771.019078][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1771.025226][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1771.031381][ T30] watchdog+0x1035/0x1040 [ 1771.035714][ T30] ? watchdog+0x1ea/0x1040 [ 1771.040129][ T30] ? __pfx_watchdog+0x10/0x10 [ 1771.044807][ T30] kthread+0x2f0/0x390 [ 1771.048874][ T30] ? __pfx_watchdog+0x10/0x10 [ 1771.053545][ T30] ? __pfx_kthread+0x10/0x10 [ 1771.058133][ T30] ret_from_fork+0x4b/0x80 [ 1771.062547][ T30] ? __pfx_kthread+0x10/0x10 [ 1771.067131][ T30] ret_from_fork_asm+0x1a/0x30 [ 1771.071935][ T30] [ 1771.075226][ T30] Kernel Offset: disabled [ 1771.079544][ T30] Rebooting in 86400 seconds..