last executing test programs: 11m43.507537303s ago: executing program 2 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) (async, rerun: 64) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) (rerun: 64) sched_setscheduler(r2, 0x6, &(0x7f0000000180)=0xe) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f00000000c0), 0x4000000000001a7, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) fsopen(&(0x7f0000000040)='9p\x00', 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x40}}, 0x0) 11m42.548147655s ago: executing program 2 (id=213): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.min\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) write$eventfd(r1, &(0x7f0000000140)=0x100000000, 0x8) geteuid() r3 = socket$kcm(0x29, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/93, 0x5d}], 0x2) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x50, r1, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x4, 0x1, 0x7, 0x3}) write$selinux_attr(r4, &(0x7f0000000400)='system_u:object_r:cpu_device_t:s0\x00', 0x22) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000440)=0x10001) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000480)=0xf) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000004c0)={0x18, 0x0, 0x1, 0x0, 0x0, 0xc}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x9, 0x8, @l2={'eth', 0x3a, 'gre0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x22000894}, 0x2400c805) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0x3, 0x9, 0x6, 0x10, 0x10}, @exit, @exit, @call={0x85, 0x0, 0x0, 0xe}], &(0x7f0000000640)='GPL\x00', 0x4, 0x1f, &(0x7f0000000680)=""/31, 0x41100, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x6, 0x57, 0xb1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r1, r2], &(0x7f0000000780)=[{0x3, 0x2, 0xe, 0x3}, {0x1, 0x1, 0x1, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x8, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffc0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000900)='syzkaller\x00', 0x8, 0xbd, &(0x7f0000000940)=""/189, 0x41100, 0x6, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000a00)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000a40)=[r1, r4, r4, r4], &(0x7f0000000a80)=[{0x0, 0x5, 0xc, 0xa}, {0x0, 0x5, 0xc, 0xa}, {0x4, 0x2, 0xa, 0x2}, {0x5, 0x2, 0x3, 0x6}, {0x5, 0x1, 0xf, 0x3}, {0x4, 0x1, 0x5, 0xa}, {0x1, 0x2, 0x1, 0x7}, {0x0, 0x5, 0x8, 0x4}, {0x0, 0x3, 0x7, 0xd049865808a47290}], 0x10, 0xf, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, r5, 0x37, 0x0, r1, @void, @value=r6}, 0x20) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000c00), &(0x7f0000000c80)=0x68) fcntl$getownex(r3, 0x10, &(0x7f0000000cc0)) syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x400) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$pppl2tp(r4, &(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e24, 0x9, @mcast2, 0x400}}}, 0x32) write$proc_mixer(r4, &(0x7f0000000d80)=[{'LINE1', @val={' \'', 'Capture Switch'}}, {'SYNTH', @void}, {'LINE2', @val={' \'', 'CD Capture'}}, {'RADIO', @void}], 0x60) mknodat(r1, &(0x7f0000000e00)='./file0\x00', 0x400, 0x8) syz_emit_ethernet(0x59, &(0x7f0000000e40)={@remote, @remote, @void, {@generic={0xfbfb, "dd9e19cff19e8731a61920c14d6873b6c3de3d08a32a2be6555919f83472fb54b488891888fca80a98ba9d42ea5ad385702049475ff09aed25e070b3bbdaad7687170c97148147ac0ef04d"}}}, &(0x7f0000000ec0)={0x1, 0x4, [0x705, 0xbf1, 0x7e0, 0xd70]}) openat$cgroup_ro(r4, &(0x7f0000000f00)='memory.swap.current\x00', 0x0, 0x0) 11m42.301763222s ago: executing program 2 (id=214): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, r2, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 11m41.884315109s ago: executing program 2 (id=215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000280)=0x9149) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mlock2(&(0x7f0000044000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r1, 0x8, 0x0, 0x1000) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x25d}, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 11m41.329282669s ago: executing program 2 (id=221): r0 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$hiddev(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r4, &(0x7f0000000280)='./file0\x00') bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x9}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file2\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) (async) read$hiddev(r2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0) (async) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r4, &(0x7f0000000280)='./file0\x00') (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) syz_emit_ethernet(0x32, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x9}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) (async) 11m40.285805423s ago: executing program 2 (id=225): request_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='kfree\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0200}, {0x6, 0x36, 0x7, 0x4}]}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) 11m39.617376886s ago: executing program 32 (id=225): request_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='kfree\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0200}, {0x6, 0x36, 0x7, 0x4}]}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) 11m15.47438432s ago: executing program 0 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x0) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000040)) writev(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebc79a12769db594b1fd26d4eef23248000000f858dbb8a190", 0x3a}], 0x1) 11m15.145706852s ago: executing program 0 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000005000000000000130200000000000000002e"], 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x58}, 0x1, 0x2}, 0x0) 11m11.511561605s ago: executing program 0 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000035c000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000380)="6636f08222a1b800008ee0baf80c66b8a8fb748f66efbafc0cb8f16fef600f01c9668686925f0f2244670fc778abc4c3bd4429ab0fc72c", 0x37}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) fallocate(r4, 0x10, 0x0, 0x3) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000280)=0x20000005, 0x4) accept4$netrom(r4, &(0x7f0000000100)={{0x3, @bcast}, [@null, @remote, @rose, @rose, @remote, @default, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000005c0)={0x2, 0xabb, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff83d40100000e88a810008100000086dd604d462800ce11"], 0x10c) io_uring_enter(r1, 0x24bb, 0x25ea, 0x2, &(0x7f0000000080)={[0xffffffffffff6042]}, 0x8) 11m10.361567842s ago: executing program 0 (id=312): chmod(0x0, 0x1c2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x7, 0x200000, 0xfdfffffe, 0xffffffff, 0xfffffffd}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0x89e0, 0x0) (async) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) (async) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) (async) connect$nfc_raw(r1, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x7}, 0x10) (async) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4, 0x1}, 0xe) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/4) (async) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000000c0)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 11m10.157511043s ago: executing program 0 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x140) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000014c0)={0xc, @win={{0x8, 0xa, 0x4005, 0x581}, 0x1, 0x2, &(0x7f0000000400)={{0x100, 0x1, 0x5, 0xa4e}, &(0x7f0000000000)={{0x4, 0x9, 0x20081, 0xa}}}, 0x8, 0x0, 0x3}}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000480), 0x60) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x3, r5, 0x0, 0x0, 0x0, 0x0, 0x6}]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000000440)={0x24, 0x3, 0x0, {0x2, 0x3, 0x0, '-#+'}}, 0x24) r9 = msgget$private(0x0, 0x102) msgsnd(r9, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='adfs\x00', 0x0, &(0x7f0000000340)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20a000, 0x0) 11m9.373480025s ago: executing program 0 (id=317): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, 0x0, 0x0, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x7, 0x1d7, 0x5, 0x9a7ec7c9181f2a19, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setresuid(0x0, 0x0, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20011500000011"], 0x0}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101"], 0x0) (rerun: 64) 11m9.048083078s ago: executing program 33 (id=317): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, 0x0, 0x0, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x7, 0x1d7, 0x5, 0x9a7ec7c9181f2a19, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setresuid(0x0, 0x0, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20011500000011"], 0x0}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101"], 0x0) (rerun: 64) 5m28.383069161s ago: executing program 3 (id=1589): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) 5m28.260355645s ago: executing program 3 (id=1591): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = syz_io_uring_setup(0x3674, &(0x7f0000000300)={0x0, 0xbf99, 0x8, 0x0, 0x4c}, &(0x7f000000aa40), &(0x7f0000000180)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, r4, 0x800, 0x2, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760bee11e88509de7f1939e8abff005597c8ef039a5be42200", 0x40000000000038}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) r8 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) poll(0x0, 0x0, 0xb7d) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe9, &(0x7f00000003c0)=ANY=[@ANYBLOB="070200e18b2ab7551bcba18fccebacc492da4fee17f00cea959db17ae0640b0000112937c3685f2f581c0c00633149dac149dd596679459959cef30701b08672dd42eee555330d4ac8af9f0728e425dac5e437277c2083a8ab12bbd142c2de8e1cdcb1bea524389b2e72811afe664909c89792c029710bc51183323d72f9cf7375370069f5b8c0f35ae1b06aff620781618eaf26e32f95bf304605bc658048037f5a3d4cebd959d700bacac23351190c5c40600b457ce224059dbc5c2ce861d09ec0a8d5b74c28c9d1f97bd7331772186833075234c7ce2cf06b156c3abcf6a27075576d01506b17d8d5ca5a8cc892"]) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 5m26.35770823s ago: executing program 3 (id=1600): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) 5m23.560133383s ago: executing program 3 (id=1612): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$packet(0x11, 0x2, 0x300) r1 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000313000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x800000000000000, 0x1}) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) 5m22.29588258s ago: executing program 3 (id=1616): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x208, 0x0, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) chdir(&(0x7f0000000480)='./cgroup\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x5, 0xfffffffffffffff7}}, 0x513300) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x8, 'f'}, @local=@item_4={0x3, 0x2, 0x2, "c0750696"}, @local]}}, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) 5m19.629172131s ago: executing program 3 (id=1626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x2c8) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT, 0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019340)=""/102396, 0xfffffe14) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r3, &(0x7f000000b080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000001, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe43, &(0x7f0000000400)=0x7) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0xf0d, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_open_dev$sndctrl(0x0, 0x200000000001, 0x137a01) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) io_setup(0x7, &(0x7f00000003c0)) (async) sendmsg$nl_route_sched(r2, 0x0, 0x4050) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x80d4) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="919f9d310cce9f6648ecb244243753b4c6", 0x11, 0xfffffffffffffffb) 5m4.074028204s ago: executing program 34 (id=1626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x2c8) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT, 0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019340)=""/102396, 0xfffffe14) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r3, &(0x7f000000b080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000001, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe43, &(0x7f0000000400)=0x7) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0xf0d, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_open_dev$sndctrl(0x0, 0x200000000001, 0x137a01) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) io_setup(0x7, &(0x7f00000003c0)) (async) sendmsg$nl_route_sched(r2, 0x0, 0x4050) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x80d4) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="919f9d310cce9f6648ecb244243753b4c6", 0x11, 0xfffffffffffffffb) 1m29.664578294s ago: executing program 6 (id=1878): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14026000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0800000000215400000012000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x4}, 0x0, {[0x0, 0xb8e, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='hfs\x00', 0x100000, &(0x7f0000000280)='fuse\x00') 1m12.297597477s ago: executing program 6 (id=1878): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14026000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0800000000215400000012000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x4}, 0x0, {[0x0, 0xb8e, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='hfs\x00', 0x100000, &(0x7f0000000280)='fuse\x00') 52.77079663s ago: executing program 6 (id=1878): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14026000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0800000000215400000012000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x4}, 0x0, {[0x0, 0xb8e, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='hfs\x00', 0x100000, &(0x7f0000000280)='fuse\x00') 36.333076083s ago: executing program 6 (id=1878): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14026000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0800000000215400000012000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x4}, 0x0, {[0x0, 0xb8e, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='hfs\x00', 0x100000, &(0x7f0000000280)='fuse\x00') 18.331005587s ago: executing program 6 (id=1878): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14026000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0800000000215400000012000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x4}, 0x0, {[0x0, 0xb8e, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='hfs\x00', 0x100000, &(0x7f0000000280)='fuse\x00') 11.129201127s ago: executing program 5 (id=2545): r0 = timerfd_create(0x0, 0x0) epoll_create1(0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) clock_adjtime(0x0, 0x0) 9.812895704s ago: executing program 5 (id=2549): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, 0x0, 0x0, 0x2, 0xb1}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x101) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000022c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0}, &(0x7f00000024c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002780)={0x0, 0x0, 0x0}, &(0x7f00000027c0)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000000140)="9d7b78767b28e98dc1ee5fba95f6f55aa2815cfa63772ef85d6390314ea053a7a78044d96775c1b767ea0a7fc072a82a54b9a5bc2584200ed187788bf79a5b43c9388ad5cef0559bbac372728721744d6750b7797c37076f37ec3390c1a50f16f4d0a1441c0eb1657d967a490a56406e721151fac137b47f05117082be34f1af0c08c70087dc8a6b84505f3c57301c947b5190b2824a8d3d0a94a800af627aedb0fdbc4ef7e1d6bc3481420f6d336a0e20056bf1ca92c42a8ac1bac3c591ee88a11b9d02223ff4c26207a8a683ef4642bfe42b86ffcbf41498faca3cd73b03663e76d9f6a768d5bbc0ab078570c9280477f6c8d96470de458581f547de84263b0819e5132e78991f825a420c50688d454e8128909ef11e5c0155351dc71535e4e0dd0c4151020019fc82a1b7035fa25adc4e1cc8f7e934507e80f1f3e77c4bd6dde55f4bbad4062cb33b6ffc5b17fc253fb0830b43869e1fcfaaa14adf553ad8bba9513b76c75d5dc9766b756dee6bf3fd3456d7a97dbab23145c8629865c9170c7f7835eb504322697377db73086aa20ea6e0b43f0c5e1c3dfd53916b1d443ee15010ddfda7de9862a63aba351a5b78c271b0d074fb23c78d73f4a1e330b53b23fc6967430fe16ec07fa2485a4a7d4820b07f87d287eb8cba7b9b1565b8d528f1d2a1b2d99639188def301e3268b201b4214ca0c8d1c54abecb89db9d5b420f0fc0a9267d64aaa0eb3b4f28cbb069db259a4ea0adbd12044f70e33999fc9bf857bb1e21e95c268922e3e20482cf1a415e3ecf8e56376a05d89b5209b4e7844060160f094175708e60f48ba29320a47b228e5905b31f9ad2a9c42ec3dccd1899a0b826fe332c135f0e2e643741d4b0dd5a17a4b5b2a4bfbbc059a7b915c0951274420ebe4d6a34219d3bc588d5408f1ed1b13c9eb90c5f15aae2ff6e75ce4b34db987caea495a819dfaf70dab3df6bab8e99c98c14051615849637fc6044304f4863b5ccdf2560a05e07bcfff7239f284d75f62b9ff78fe67f3002617c4bf98a50e8b106645cf270dd19b8f346824d5179828524fd66d443ad36f0e081ad5562ff706f43819f8df9cb01daf60f076a62147bb174b9428f3461a5fe14b9b9380af7c29c71e0a17f750cf8166728e03f5add82421eecdd71bf83ed1fb93f863659b7383476f62cf22bb0e021c3d2dcecfb3728ef747a20bbf610563c6a26ba5bac9508a1877e4c3f1c2debd07e2c6913671ac948c5f0528914b5444c2b4d76b990ba6658f5b7b3bdbb3d6110ab19b81b7261900a05a782bbb3a18f2fac0520166d0430fdf672bf3913501ade5a8671f38be55ea4c03442b577c381fa4f30eeb82655e0d43f547162df8bf00ca4eacb382d849f3b5f4a99d892e5266a5564c13baba8c5aae17ce21af95af70c7569e7ee0730319cf013c2782f6d31ab24118ac02fa18a5f83cbdbfe37eae8f125fadd2517d3af41e33ea5661a6dc0a3be27c4438d5f7ee2f5839ab14fb304ee595e370159bb764a6ef8cc2e3af1a80e7c1ffe08312d7e351cb525f5ffaeb40b5221f187eb7a03d8fd47bb76b1f639bbbf1e15ecfbbce14f6dd824c0a6315f7f071a8f968146e4a84f4591508f8d10256a7bc8626b2339ea312117dbacf89748cefb67b718ce89f4af2d22b89657906bc5929ef97b88709a4c7b18101ca82d31c3cda99c38fc5d36b0160c92e2d87fddbb289f0b94430b5dd8ed48a1c3a527b83b24e0cb123efa9586e3132d233933aa226580dead6f925d88ca7eba75ceabaf3f96f4df0c5de46364eedbf8c5dc5a668243b51bc9a0acdf4186bbdb58dfdd0b5e037c364fc86a177488e2f083ce21e4516a2b2c6e7b897c20099f45c4222abf9be2c6ed900355a981ec13813180b6656aa558c152416c7caecbeb3c0c53aa9b54fe6d4f81b3b2a333838969a3359f948d007754865cea465a9cd5b542b3d130cac6887700766d5508b06858214b307338c0539a8d44e35588f1c5075d88a4774e4bba223fed6558d70f93d75f991851875431c16e500300eadb204d697679533ea27f9931a477e4146c360e2073e498587e285631419ee4b4fd5629c0cea9fd0a253b07255e8cd04e2b765d5707f25305b2de70867896f04d3aa1cf6a8549dec4db80f23f3e7a98050a86325c04fd57b45fac61e33d5adbd62427ef49dfbbb5edf337400028456c14833b329fd9da2d3b4cbca38c309ca96be6ebc17b74dac6cf1da259b00eb6e9c6bae1312bea8c7f235c1d719555ae372564070ddc288d2bce529360f283de5d9071441ba93dffceacdebf9cf00c13366e0e82c0548b27c58f6a258f27359dcd85ff03ef2202568f578f0916d77e5963d9a361b70c263a89d170c2ac56038e524d5420fff8059620974c53ec4fbe23810dfc04928513a56a7279dc1c3c72290047a652d144a3323871538e7a5612f3e4bd392cdd3f80f2ecb2e714aa9d15e9ed2a464ee5b7d0f31479d287a62a5e48bef265062255ee4fc14e6d69f73f0f6d461d6ff33826fbf10f7162d4fc7ab0d8c7141d1ba2da8936c1255efbe55d41730bf2e2b609c8c8bc76dd8cfecc840c851d595d25fed8c79115521c18cee186c5238d7f130efbae1ffd2b4ffb4fc9436c3fb4447556ffd699cc15173c2ace7ab91225015ccce9368e0f6f836d5d009f631fe44b4d9cfa87495dd129140e645b2387be50ff068e756f782fba96940ab1b1bed72444c7124dc2f1711e7c9a1a2c28db4fec249338c38ba42e2a3214edc3803d1e38912d53a2a0ea1f049cd5a0026157049666a8c825a8326aeacd637926b9839c1d5c948416d3fdfffacb8ff0c467fc9525914e2870f32aac0682a1ee806b72dfef4dab6d5b48415f34f4c6948fb71fcd853c66bc6d40d716802ed847421058213dbd5cafa04e2fb2f0fc05a0f295ed334a2c3c15be228e3f4db42d26fb262808480c77d871c6c79b1994242a10ddd348d0ba7c06ca1b97c8308d9e477876135e2f4f7e94458de3d8ab423b8d44dc71493a77d15bfd2e4e2bc279206829568f374cf1a6aba4eb7c03a6c46e85460c78a21f7dec75d5b585aa8ecca13f01048e6ea9127b7a693c3e96d21447a2c19a7879b8566fb29ecce64e8f8f12efc9644e3f56f900bbc5ee59f6c28a2498cb2010ae62533b6a52704dc8dfa18de1b338cf658757ba33efea379c9079f59916f43e839f0c7f97daa62b8c0910a20d4927409ff6dd9e7463f9c59b6fb2d8a57dd3b8c7ffef45b0047cdf8eb2204484b811c41cd218c27a61d8b250f29d6a4a714257ff730e02ffe1d8c083406a521893d7522660276cbc07aad47653f8524310e9506e562ec347cb853f9923bfbe8373ced0394ff3106b568b6a043127ccaeb5be9482516775798554ff45ada7bdeb660bf08f65dc515b91be53ac27a8d661db344872ed56b96e681bc8090273487b0a6465d6c81e56b407eb07a1c35dae270525920e81b80d2a9a66678e9122dd8b0e004fbdee0f55464c6ae2fe8bba5e8da9db8a4f9c23e3374ad55ddd641f8ac3fceb055cfcfe4ec3b4af4276ddee06e8043bf720658de630a2681af2332583a64bd5cb63c7671fcc59cc184909a32acf3524772dc4891661000828efcd84a09b25bbf1f0582c42e851ee9ce42b87c047e50f165b827ae0e72293439d1e55169004f4df745b079318d3dfd7ba4ecf5b1680906c78b8af50dcb03257dbf8f4e7d2ae82c840bb029c1f900de5738ee9544e3a929b5676b6af7eab2da1ea33096f0ebe0ddfd13fad1716c8b506ef41b348af80533f3abba1f20f7d1ffda16155cfd288033d917f642e2a352fb7e19d269e5959dead3691442521cf9eb3382e61a5269e1883c15d004d52b77d3f13d0ccb02167804a8934c06a53749a96a577ac2287e33912d64142ce8822c6d804a2d3a4d1cf758d25dae97423783a5ad0427e2d07ed93aaa132e0074f6ce1feec067bc84541c34f83b9371abd993f1ba7d91b93f3348464ce27c545dc5059ffeb79f21c6cbc366a5344939794589eb77b86b8687480b5759db23cadd0d25a30d41613ef2d8442777f81da9e6ebefe6be0caf1dda53ec12f63555624b3d575cdc68ed19965a66649c72f01b2a09b6f9c9794d36e0d5ffeae6d6e393010575e7e94889e54e051160c53e041acf9ee8838475a94cbdb87d3799f62275ef9ba52965199b398dfbbd87194bf43acfab074c8daa15baa11272917fc29a1af7bac39a3e460fb105ae5339ad429d379d3a7b6c3ecbb8db8162d570faf66851cfc11c747be4e4e0efdbb2cab002dfab137a4ebcfda78ea4faf35354b5543309d7b0e80db1d2ef0a6322d7fa12c5a400aa2b6d370900ee406d74590803e920f7d66287c3da76137a93ccfbed300f10bfc90b1ad37630a04b61957c292665292564c449b1495698ca16db077d5da2a986c5038ec4c64f99aba3a0350a63fe7a0a7f83bd6487484f5c113cab5eef3ed6bb824bbfe659b4a2e6dbf209757a2f472e9038e3854c71f551a541c765931e84f2152a49afb9cea9f2e58d5318b675a745a7fd8c5428717b6ab4b6cf34b314fb3030e2b122e8e468086476284192d965c623c0795e857c4f6a9e4a4c3808db3d9205aa84e24d6eed009ce67c505da8240e94288ada605a0033d386a6c92cb5058959a1c0f68a9131d219601f9bd2b655b25e6665bcd6d011644a88de26cdc9a68516c1ac2b90a7fd317454ab040fe2ca792c21ff6e7405cbe056e578f1ab4fefd62f201be21b55384bf8c76e2941543c0931f5789b1d937afd5868ee5e76c4fc6b6cf869f6c561496948e005a1908ba32e8d93237d853e0c1dffcfd52d36077015e4037567e219017e8f5972e8316b83247097ebae9df8e679b2af58beb9c368c0642a146b3da8088c99b0991140c6d951ff3acd56e11b0d9cdb39b4db10d42f9e2197e43a60d79f45be90c9b56a0887367d984f9d9bc60dfe52daeac4c482f48fcfeaca42d7d2a320309e35231efc6e3ea77b927e3ac7442b15be57318e61c2f3ad7cac1f501996bdfc40be30cf4f3ae5250edb260025dacfcdc6f738d7d6e1255d65b2f366fc8ab276bd2a5df967e4ae4fea5bea619058f2dfc78e5856ad2a67b3979e3e3a2ce14d533c5673e803a1bf974b9497d6f0362817ab921e3c20ff4f7370a27642ac4865f0bbbda3b2b9cec42c44f61bc9a47bac8c10da2867348c5d49faca2c7e737e798258d7e91656ff56786bc75fde0593954b8b36b2f7421b5c2f9b6b51ef4e34481f3ec88f23d2e8cd84bddb5db1c6621f57a13df6c3ea5dae658dff93968ab6a13d104428d98adeaf11defc7b82b023a08259ffb8f430c419723d8e99523ebce9f06c4054e40ba184c8b36016b4cd24487207f3d83193ee8358e12b4c3ce4ca39b878c70db735a76ae129d0d490cb745b74bb756145ba8f6bd7d621b41a682e4f35f6188a023d9d04f5d6b4386fa657290cc2f5232926f9ea58d4dca9495ea0f5d94c17dbf07abbbe804e71fe883a60b4d3f9f57338fd9d0b6158322f3918d24f88374764c491d35db5e93d8946540082feded28b6d593ee595d87086c3b6d5e0012724ea1b21bdb87f49594e324a63d55f0b4a7338f62d2e76945de2a516418c6ca9b48807334b5d41983688f56a4b9ca10d8d3f44103e45b5eea490cefb2fbb0f6d42ce727718db3188fb84c19298b671123d7a204990c2a29746ee94942eb2fa05422114876544a15dec1c8238b87f89592afa284ccc15aeed1e9dcecd59cdf90b29349f1af5edbe26381c574a7195737d53d7d1e6c3d8f2d56441bc301132fc4e70ef79dce0fd041773bd8a1866811a10badd0cf6cd6cffc0199c1b12d697b731f6042f97559165eb4307709d79b6b4208d963db36e593b3c5dd2182ef85d05923ab4c263e2b20a3c7e324503d890167f601f4bb5b730b368dc9475c1168740292ccbe341f78ecff1b2d2272ca9a5a78f7f8b97359971500d77836b2397c701b58f3286dab5c46a0b2c24e2eb3e6937fec7e0a90682beddf40e79254dd04c486ea13fe912e46a9abc0a7e353aa7bbcbe985aa030ec462d60bb56a08301c2b0f48fb53d11fa0193e79f724e428297a4e30b849733fd394d01cbfdb6ac680c7ae51d84edd011a40c38a4ad06430eca16f26f1ed2eecb95b7bbdb9de971dfbbea5b7962d62b085e5a7ff40f6f1efd0a39cec0765204de6533a82b0d5fc46f256fd6a75aed8be8b86105fe6de693f5b489fbb1a27a80e2abe8291278fec3ad7323f8b3e44dbe52e5f830c10fead8c8a6d088af3806f51cfba982bf0889a63531e963f09724cd8babd0777a14c4adcea134a355c55f2dd3c5053ac9b0c20c82282f1cf6b7ff642e429bfd20c0fbdcbe86bb10738b82013d6171c9c3a553db53ac6907f639c728c6438981b7d54dd35d0cf1b2aea0e9927f88a330b42ce250b2aa8e2e0c390dbc0c733ac2f49e7b46c156b3659bc244a0e4e16bd8c5cac3b35b49613f2b8cf8cbe9d253d1695b535b66321c53b912c6f1b56d02f781b09cb83ebec1eb1f5745447c7fad467428b713fd46cc0e331b6770373388cfedde58b20a2daa8df0d2bec958287b116af330eb4b68bb018549deba4d43a732efda59bb30d5453b8ffa942adfbd8e4caad8eda6dd05aaf8363002bafbe1134f75dcd2ebebf76bb896a7d5d505ed3d20be98aa0f0f46d2f410c16791a45aa7d1113bc5f2164a15530497bed487e923ba6a40b99aa8ed6b38f65a92364ac1f561da4143ea628edfdfbbc0b1c12c5d0539ace7f6916555145f08eaf4239bd17a174afe315e3bd10e837e6cd5090b6c87be5ed69fadeb0d238626c6ac67532174123b2b50b4c232710b58c430f0fc2a821d9b13f97799eec84ebd351c60f7d6b194b8fcaf305f2ab90766b8a3f4375f18c39e65044634fa7c5946bf88328aa9df699d14acb8d5ad3a5bc3702d6171ca1a27413c20db49ae10b5128805bc02a62a460f21a099f7c54dd885731aef5e5a7b4bdff51d678546c8b55962e960bf977969ea9349cc61c760235a0c5c0b195661085ee4fbd0f524c52b2ee9abb43b3895682e1d5c1a357f1d7a4efd4d4f4a0560a53ff7cfbba79f45c6f67f18a1806f1235326904670ecbe61f1c4319e41c42f2b770c4190b9133168f17c2b5cdbcd6e0c442368e2cc24eb804f72db880cf6b49f42c0fab00ff70756348de9aa9ce10a6506f21e321d61b291a3d262adba9ee1f94d336080e3b7e42e496dbc56d516ef345c3efef4c2303f6be87855ee2a48157696906cf0d3d50dc68a8504b237ddb90ccef81b5b6f1c2298993537b94a6c56cd407195b6d0f8812d61e08101142dca3e0f104ef7b24aaed3c410a53ef8f567893a2627c06cb141806ea4b64cf5d6151fdfc7cae5b264631e80c9fa666df6ddeed91a1a646122ed6943ec27c943ea1254fe6b79705fda0b2b6fdedb204ddb64a005b5e08a782f080a3c32db89a93f1384f8098b2ff91ecdbd5c18aa9f75e0ebcbd0d2010e16cb8c41c501ffe14c63091689343b00503fdebac37ec97bbbbfaf79f5ced469e739543c8c55ebe5cdb763d5a30f202c24a15c37afb07b32193f1cb119128bc8c0f42532075d05d749d9f4ffad517216a9d1b5dfea4479cf2cb56a7a02cba8054a23763ffa97ca9f9b41e99a2679b640bdf4cd45bd47e5a5690049aefa38e2fa1c41548504f40bbceb61ad8a7ff58cd1d9f80936b9a4ef80c3bc5fa3ff4ea7b896aedf8ab725e6a4bc540ea30905193dc31851c7fbe8e409b2f7524f06200c3e256a2a078a795d2310fbfd67b023e5a7cf44d8a9a046c23ee5f59c9668b0793e0b30e55c43e03a9b5ab07fd5a21fcf8006cd0c90616de1d17f40e3c18449d0038465aa13437aaeb698fd878a65157ec71a9cddc1e28ac2b176a2738f04d8e13a629c9281996e3a0d2f4506225bdb9077c1d900f91c612ad08613b1c7c52ffaea96190dbbafa13a83391a627fe7a9590ca58f56170638eb57ab79056c0beef23b39db3aa74c05a1559c9ac1bead7bae643a25b3c5a2c61fc7865fe12c6b2139b647b55b01c3a6f2728673655091086b005bced2f8677791b64bdd5afacdd0767089ce1652a4660bc497a2f0abe2ee3379f8c60ab8031d0400ecd1da95337605fd02d0eedc4cf09b2bd77c042147118b7b5a47f2b33cb232978f77c93de955dab69050723a8a2157d66cb0239ba6b7b83b88aa14a97cf92f2390b239b9fbc9e02c31585d7b4527aae7a78460b3894f3f9267f7842aed4dd11cbd66dc50a47f79efea07f611be0a54069b890761fa7e4941146dc7f260749e77e893e51be84c6608a6c9e33d3bf7eac40fa9a8a9c1504ff40953c659c45a30b07424d63351e8b77fc831c11b18f61a37baa48f8ea046ff526b08860e2615815d053c04b78d71d5959d8e52401b8ebbdd7efa25943b8b4d5e6793fcfab24ed90ba1a3248e732cd13bf47100da456d4eeb9040dcf84c3ff720423f9df0a71e35388a022d03778af37dad6ef5f55fddbc9f52d67c011ee9b6b3e1d026ac2422a6042c211afe5a3a0b97bcaedcf7a7387f2df92cf239336627a4bea9972bef69b21b92bc6422da5e704eda5834dbcf53adeb879f6542bf1507b3349310496439316ddef9d366d3958d54fc91ff0ea43a60f218aade9c748a274924c2a1a66870493a0c281f602263bc4471f9ca1be2ab1ff9285879973ba7cc6cd5a36a449b1dc95a14f37b2cf3a163c459a37719c47300d9adfbaf3b48c0afc20c95f3a3a5dba790ea3e339467917161eefd9a2f6c5022b0921b5e50931df9976e9e877ea1466f41f130c1fab42675d377755f9cabecc2121604230c37cc2976bb5a88071330b4fa5495ace8e74e7b20fb7ce6ea065873d1c34bb0ca7f25ff2da35134a8cb6f9532ff3402d72258a00e793cd1ea4316952c779171ac06c54a57669f97347f48fecb0b4417c019a9e6b162c4fc3b91eb3e59ce936847011dd86914e51047f8c3649abd623498b8c5021a84236f5d4a0f5508d9e32b2a785f10d7acff553bc0e6d1f069d1e8b7e24f30b799a6fd2bc7b056b5fa3fb3c627daaf34fe9693370511cea0ab620265511bc40dc5231eaf7c35f570ee75b6f47c2333cbbbddde6467a58fbe407a4c43bac2b099c9f2b7a1bdf9e24319e1a03e12a0d285cfb6f00a940ac80b548737369cf916906141cbb3769c1a7eeba9da934af41a7f373dcf13e6ecad3636fc3774e4ef3be1a87c6590fd3d687faee4244d2fd690d639817b1cff97a5890dc8033e4c54bb8cbc05914027874d143d24d83e527fa707a2663784391c2236df9c1ff4c8d7f13ed86779ec91be348f0bd84c640000da38f100c5a359d723b85bfba6dfd1f48b75d81aea6015a562b761296353826f78e3eaaacf938fe0038129e4d1756483f6dd7689f6fc743014cb1d6c0b1c2e09f3ef5120d2ec9579cbf9725e529e149829898d3372529aa2fd563010a4c18a68cf0890d57c82e8ad93d47ac1dc8a9a0988206dbaec82aed8a798591f06c0cdd20bd55c6ba910220733ee6b3941c2a1cef5547f89c2d2a5a3f3f053ce1e62ee5965fc33db9666c14ff62f6266d6de44aec87422be579396e7b64b31d627704594b14887ac201b7ca4ce42bdd2789bee91388fd3c3b0e76d225847946c18965c35fc1a2b3384429696d94e450f1f8c54c8532e7cf1f2d370fb2e483af2a847b0e25eac89606e9d2d56b88924b8b123b27b31c5a5e7eadbfbcda8e7041cc625f5c1223ec70cb3b5cfbae851fb640095ac327df220bc9502aa151c7b12ab90e84aaedb6d7d1dbe664562fb101f353c14c614cb66b45d6c74d7c3d39a9cda9553abed014e6e9d8b6b25ff4dbab874b95d869c73532c0032b6823da66db795fc54e9bad1352fb2e6ad7970c9117a41d6e9100e89a58c599760c078bd3e1e2eff79ad40f3f3eb12c0c7f474549f5266337f7ea2572b1f528b029cc6b0e4a5196b4301787a84420122bf4926a5f6b57e19d242f62e7b4b3f4dee155ef7e8245e008b3cb1270836d3de54e2352dacdedba2b59f72c66d5bf6e6fadea105c4e82f926a807f479a6c4c05e9b01e31653472778d26fcd40728fef16bca85d6577d5905d10a43417b5720f4ea73a156b6af074b027aa15dde34585ceb3d1cdf1576c3925315533a10585840ce2ecc5bec17329059c04bedb3c4e6fa501489f206f86b993c25904dbc6789f0b64bfb7c2f8633aa67583762d959590da10088b6aee42bc83bcd0f805e0dfb93b2a685bed052891b50d8e08857bf16bf5aed8e4be67d755e04f303fdead65f362cea9c622f8c60cd1401c6ca71275d755b7ae1ca94aff727bde84dbaf8008bd563a0309b2bb681a3f54c89a8d83f3e93c197e0beff15cc4ee7b45edb8ae6e45f6fe5494d63117620b24a3205a69209a67408d625816afd3e810ef56f0a38e25db83ad4d0782bbf0dd71948e36a48b3df9cc16659633b5bf2cd21e8355ba3490a7e1098d88429e5e4e47242d3253f0818520ccbf8fb22c7ada74866cb7901c8aae372065b2414964ff72b6871b7025b2bb1c95d0496eebf7a514c1ef87714337427b6dd0316bfa98f5ba75765f3945265fc83f4d2803c5c59a0387a6629e61d0edd5be8eaa212e4b1746e3af1a11aa30e4dd7b300d18be371560fb44df5656d7cf4cde8ae6b1bb98a2429be7ab23832c41df0be370f0a21c469010305391ea2c89b5ac8ac83095954ae4a5ba0e6f8434267a156ae42b1a2d69db02dbec89b15dc0d4250f23940fcb55ee63df467e48e452fe8a2876b8210efcdf33e25f0b952c1aae85d7587e79e7cad3366207e6cb3f4ea7eebc9859187020f5f93cd356b7b7328c3676d1ee1553e35c34053709af1371fdd08710ce23a712195994b09f91d5d0a873a68c7c6d57d3d1a0ec4176ff8b3799487cb4343b6f0d07662f2ddf31834dbd00ab23909564ca15e1016116615af4ead8d24807fb58a999ef8c2bd14893cd99ddaab8187875ed4518658aa8242f83bea3b0e5175b547d6c7a85b49f96b712d1a23af18042c4d3191ed6812ec6fcd917ebfef96c6b4e5afb4677ad23c38f910097cedcd32b4992ca063ec6e821c53c924116780aed19511addab9bee29c05e8ed6036f0dbcd03bf8e38756ddf4a70c99b9e377fae9f01a862d428dab72abb3fbc5ad203dc5f34f194cdbf4d5e2ebe4c8cb2e2258f0f5c54fafe5e310a4227951b0a077007457c5e98f87c0c63ff4d1b09726682eb303ce2849edb4a54ea611c691a6b928312eccb53ab3fed03af8165d0bcbbd3b4f5668c3279190d09cda0fe5e64ffe702419e1a2959dd4b91d2b4f642396dfd94fc136e89936bc96a7083bfd786115e7654a9fcec621e01c53cdb499586c5de49352e974b1d0f6a632d267a42455f22f7c5ac733f496f5d95252d4a8a1eba8dd78e8d89409a548c465087746e81d6af4056008d071a5b0f34a2357d04dbfd2a199c54c1a7169dd27b90e9afb20eb38a756046035caf7bd461e0d9ddabfe31b2e44d230363dc3deadb4c4f3ea239f9532938b32b66dd86610d8b38abfdf359ec2590c83604a9f6ddf016ca19053935eb8ed3ad96b0abe556744ca9c8ebb95cc922ede32c7c47c10722400c8f6", 0x2000, &(0x7f0000004a80)={&(0x7f0000002140)={0x50, 0x0, 0xc, {0x7, 0x29, 0x54767b90, 0x810000, 0x5, 0x1, 0xfffffffe, 0xa}}, &(0x7f00000021c0)={0x18, 0xffffffffffffffda, 0x8, {0x88ba}}, &(0x7f0000002200)={0x18, 0x0, 0x872, {0x9}}, &(0x7f0000002240)={0x18, 0x0, 0x6, {0xad}}, &(0x7f0000002280)={0x18, 0xfffffffffffffffe, 0x9, {0x7}}, &(0x7f0000002300)={0x28, 0x0, 0xc911, {{0x3, 0x8, 0x0, r3}}}, &(0x7f0000002340)={0x60, 0x0, 0x7fff, {{0x7, 0xe56, 0x3, 0x4, 0x8000000000000000, 0xd, 0x7, 0x8001}}}, &(0x7f00000023c0)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000002400)={0x1b, 0x0, 0x3, {'/dev/iommu\x00'}}, &(0x7f0000002440)={0x20, 0x0, 0x100, {0x0, 0xc}}, &(0x7f0000002500)={0x78, 0x30, 0xd, {0xd04, 0x7, 0x0, {0x4, 0xfb, 0x1, 0x7, 0x0, 0x6, 0x8, 0x81, 0x7fffffff, 0x6000, 0x0, r4, 0xee01, 0xf, 0xffffffff}}}, &(0x7f0000002600)={0x90, 0xfffffffffffffff5, 0x79, {0x1, 0x2, 0xfffffffffffffff7, 0x30b104b6, 0xff, 0xff, {0x1, 0x7, 0x9, 0x7, 0x100, 0x7, 0x8, 0x8, 0x800, 0x1000, 0x6, 0x0, r5, 0xf, 0x101}}}, &(0x7f00000026c0)={0x40, 0x0, 0xffffffff00000000, [{0x0, 0xd2, 0x0, 0xe6}, {0x4, 0x0, 0x0, 0x2}]}, &(0x7f0000002800)={0xa8, 0xfffffffffffffffe, 0x6, [{{0x2, 0x0, 0x101, 0xb6e, 0xffffffff, 0x8, {0x2, 0xa, 0x5, 0x5c7, 0x7, 0x4, 0xfffffffe, 0x4, 0x3, 0x8000, 0xc, r6, r7, 0x6, 0x7fffffff}}, {0x5, 0x6, 0x0, 0x10000}}]}, &(0x7f0000004980)={0xa0, 0xffffffffffffffda, 0xa84f, {{0x4, 0x1, 0x63b, 0x1, 0x1000, 0x1, {0x4, 0x4, 0x5, 0x13, 0x3ff, 0xf, 0xfff, 0x4, 0x3, 0xc000, 0x2, r8, r10, 0x2, 0xd}}, {0x0, 0x10}}}, &(0x7f0000004a40)={0x20, 0x0, 0x4, {0x184b, 0x0, 0x0, 0x9}}}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r11 = syz_open_dev$vcsn(&(0x7f0000004b00), 0x7, 0x48105) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000004c80)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004c40)={&(0x7f0000004bc0)={0x54, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xccc000, 0x54}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1281}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x7, 0x1, 0x0, 0xec, 0x0, 0x9522, 0x3]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) close_range(r2, r1, 0x0) sendmsg(r11, &(0x7f00000055c0)={&(0x7f0000004cc0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x1, 0x3, 0x1, 0x0, {0xa, 0x4e24, 0x4, @mcast1, 0xaa4}}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000004d40)="936b62e5000980b5ac", 0x9}, {&(0x7f0000004d80)="547209fd4fdb35021a58301af70a007e077065bcf892bc60272e523158b1", 0x1e}, {&(0x7f0000004dc0)="66b4acb982600430db4826b6989bed9d8b02f7d520085e5f080f4a012bf51247c7abbc9b5c6a6b4cf0960874dbf11692d57e6c43e1cfd055a36d1f6189228a88b166ee0b4c6534209d65c950988663b85ebc4b21e524a1671cf24f3ff4d1f0e6f982e5c376d1c980683c8a0f6e14db0e4e59d2ca2d9bb619300bff32b622ea49fff86261d5732128b541c41591fdfa2383a9e766f55adc9e225603963c1598baafa2a821bca75e07d76219fcae1395489310", 0xb2}, {&(0x7f0000004e80)="b0c633450b838ccf32d7a53fec66a73b0e39fab7d9f90ee25f70ea376dad42438977935a2ba87ad19c67252366256ef0bd7bffa64e4eb8dc2ec560d54723b2be9a8cf2371bf4e6f417a8cb7bd19fd5f62629803bfa67878df8dfdd17e1dc0e486a71651650426d02731183fda2b4f3de2d2e786eb378953f478e6c9828498eac7b38f83f15df7d9733e511791ed0baa2", 0x90}, {&(0x7f0000004f40)="b1f4ce5231b3a1687fe133a9e13797817634b9e0fbd65f660d813ce1924e0df7535cc3c334a502c50d36d4237abc08b514b37dbfa0bde3dceb13cf23b45b6eb0c9cad1148ea08d294e0edbc1042d577ba6069166cb77", 0x56}, {&(0x7f0000004fc0)="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", 0xfb}, {&(0x7f00000050c0)="3f8f3d192826384df4e06f562aec2f2feda14729ce45a5e864515169889280f1139740ba4cf62a85cf", 0x29}, {&(0x7f0000005100)="39652e282c6fda775de042876c6850c2ad0bf748ec70d0dd58c040680ec774cb2b3c461bf14b8e818996e7870e177658d3c9084cc80b2e2612538821860a4b30d2a5ab1bacd7448cfbffd217842b9824ff35cde5dfd1cc6c3c3868e14318cf879c31aab7d8c7f30c83981c", 0x6b}], 0x8, &(0x7f0000005200)=[{0xf0, 0x119, 0x10001, "d1c3d38547dc3c248cbf71479a4836bf50a1cdad1d3f020227e1b626170b0d89a083a10a106bda7854487de9f93be3207c4b7dc30c0aeec48d6c718c1df7358a186a1cc97f339e3647b385f3ba597eacc6dd470e2c9abf8c96c8cad72c11f9eed4db6206ec3b5d0dd880a920c3e7fa5fbebac3299a4f51004c953d6fde28bc1d529d3bc115159e2e9546ff4a6b643508fedf9a83a2ff0cf7490b133f3efe2cb84ef250363964504e992097fb4b92e28617bb0f1458da97a3cb2b17f935af860adf468938ab38e8dfe31ea7bfe0538618bb70d6e3d49d83eb83c2235a07"}, {0x40, 0x114, 0x2, "fe2345545b53188a7c91ee91f9b10ed3949f4c5ef35c2f186b84ddbe95354ab2280e6815df75aaa0408c78f507aad9f2"}, {0xc8, 0x29, 0xd, "65dc203642a10b477b28423af415de591bc4e2a4a719af8e472a07df9a9aef39458865a3587c454579c23e4df8b84f63402875fbfdd248291a6bdf1d2d435807a11c1619d5c7eb3f00ee9088fc55e48446536bb1c873e09dd5bb7af2e0c631846015ebcb3a7436fe41c63b12adcb67a5d92004cee51a60b7c91c9cf11a11f72cb8abfcb1c24802666a96eff2b16a60103a63949b6878d8b0d51473b81bd30c9c7e6a83c7c6d2b9cd5e2303f42cf34498dba134ca69d1"}, {0xa8, 0x11, 0x1, "164f0e02b113b032fed164695aefa897b9d6d08c28470fb62538acd9cae59fb505c5dd4a1aaf9197ed75e5c6fff392f534ed0914bb74d774430687fe2862138341387c7e9e29ea2b9b9aade92632839d4f89db56042880dd13e7647aa2d659f628a361144e5ff2778254ad9ffce56e8dd0881e5ba3e8576344eee81b1ebb8cd5aa1c659988bc448fc363a19e6dce100524e11e1940"}, {0x100, 0x29, 0xfffffff8, "94b12ee40511f1ca97109e9a6e2b43f4916a03b058a7e6c31c39fbc52a17e830250dbf3b1598a05372229b48b8f8590558526b88478b12d9937c8fdec78dcd67fc75c0a174e921f974bc0fd277d6973636cebc84135c0f28ab87df2146c92e05adf1406260afd041214baf354890380e38165b054cbc27ef71fdfd1db84d40dfd01e271f2549df0b01b71b32f185f4b40ee05c801645c68bcd9cfbf0a5457dcba16cd5e8f7d91c9754978c9fba9938f657debb6802614d443225b31624569b97c0d1bada79497ddb312c71e10c916752a83777f5b39bbee6d3b16c1924d9a303c31b3a466a0cfd36d8ef8e28a897"}], 0x3a0}, 0x4080) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000005600)={0xc}) syz_emit_vhci(&(0x7f0000005640)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd9}, "12b27756d6feb5a039f49ef039355d65897df70e5b2c9ded5f865a86f37d797b28599a08bc0e5dc2bbbe5140c88b11fffa216f6b404f33ca13c823058b33ab1113ba682688155587f7b5eeaef099a85af74b219af7f94a5b51eee6998cecae6f0826b2c0257dc0679a5dbd3dca473fbcf0ba34c71e4d4e23918660efaf87185d7a4265b99098fef9b41f75703606fd21731f91a82353cf1325aed09027e3e9dd596dd6373fb9ee8e031282e03d3d452f4f4566e16c7cb2934c16968e0d06cded556e915de22289ffa214dd063bc7ac466d18868191a44433ab"}, 0xdd) fsopen(&(0x7f0000005740)='efivarfs\x00', 0x1) fsopen(&(0x7f0000005780)='binder\x00', 0x1) openat$cgroup_ro(r11, &(0x7f00000057c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r11, &(0x7f0000005900)={&(0x7f0000005800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005840)={0x80, r12, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40000d0) write$UHID_INPUT(r11, &(0x7f0000005940)={0x8, {"02072e79b9f86e712f48e70c9d345742dc16bc8063f8beac8df1d7f112ef8b4aad3897ef8a2fb04fc1b829cd76536766a16b2d29a3a2044914b4465a46acbe7395b1832b0194015a2f10f7c1bc61554e750698d76bcf004856aa1eb289827044c7b526cfd7dad5d8c900a850c3b272d18765050fea0639d3a006bb348ab83da6b998156506175a3f5181207a2edba5392c093e40f4d700d4fabb62c6c1a7af504ce3bdbe41bada20dd971e3c609ecfaa55320b6c8ba53033d51c8d8d1c12f96af3a143f8f6c681ba65b46c34e53c4c1d1bbf4be13a3f14bdf88dbe7a81661be371aafd908c3f94d112dd2a3d1ffd392e1fa1fc3481d8d22afdc19107c29b6685af660d427473f0da13a172624e673ac3178b1c8301b1ad5c1f1fe19067957f79dcd30f06dbb5e6a5451ade85601b153d0bd3b65856248c6e8d8bff688a660e9c2dbfb97c4c35286539c33b5fb8c1ee232d25498225b6b476cb6617f5e32f80e7f7995a67ea907ed1d97e8e078fe2ef467c066e145ddbec58b9063eed8013f8d8b2f4e1b7a2361cd062ae0d8822df26ce039bbb9e65a92c37458d49cdc19cf32bbbbead8373a032b94c67c7199599987b80429e003f82f73b0e9521da56536acbac03cfcd733a9220cab40bae0af111b7060f2b7f2108a721ce4e7bf531e7f260a9c0f53c0e5ccdb6fbe5ab6266b677b73623ee8192be8e0248b78d348c4543f762b01a4e2207f7321bab582d1ee677a60e5b5dda899692b41840ad9cfcf42c2310432623a31fb801e63c3cbe2e53f8ce4acf72ee155340d05109bfb364f431fb2ae192d46b2fe28573834ea0ad9faa33593d691aa403433ea4f0008fdf13b2f12a5b9f037a9327e4beb272b4293a725cfdb319be5fa93c0cc2b06fa0f71a2d9d7f13f5f9430e2bad10e2d4b441e7799944e01e845aa7803084a9095335e053bc8087c7bd3366035b483c4f052e16ea69325396185374e889636a19519c06de5f31a61176da155bc13bb7e5e58cc824f231b113b9d3ac0d322785e896664797ca501b7431967b47f9a3efc8aad1d7211e69e801e9130e31c8715eab6d091507c49af4e22f3c6cdf6c9966f3edd25cef982a6d1ca5f3523bcd4ea838753f18506b48515354a10a51f869857592d9491248e25b256062b8dcb18ea4b7bd244a366978485fff2ea92553ae7c46dfb09d22509c261613ad3d5adf46058b103c13255a9a6680dd8d94de56df17534ef719d6c97d47dfa1b428f04704a043da4aa9b44e300cbaf573464e8226a135cfbc0c583870366b4b1dd07cb839104a5e1b4f83a759fd5c6ab9830cbaf4bf09c115240480e2c909ec73e7ddcec25f313235affee1028dbb80a9d145c107f272a9338b4c5a66a0bb6f52c76d14c779a466f884a1d7e71269b6f0f07c70e1340e0a768d169b660bbadadbc2b38c86ecbd8946c502dcdd176b758945c87e2f39784107a290870639f422b234a7ee01bb404a413c289c9cf93a90df867305815a57426751cf577a73d1745c482c2047e57aa67acbaabb09d79734bd306fd8963a071d739c016c8d67c9f1bdbcac6d0a3bb0d324f4958401b675381ba46f758a9f33aaf6b4ba33b5f74009742049f6978db35042243de70ca36a82c06d29d683405e722d4377fe1ea2fbcf49b417a08be6549ac3ee08821a030ad77aff55f03c87b0f8fec583dde4c218016efcc1b1abf54fe8d5c7152fdc82cc847f9acb9c8134145b6da70bfb951c4b1b29e5dd0772769369c46128cc6d5b99fe7d7d747ef79c2de64d711ee5b80597c45d71210019ea8843ebca4996232dc8ed40df1efcc9d6f1eca0312e35307330bfe972ce2ce9488a1447e502c22e17b0cf370df5e3a5e7a0cd13652f594eafb30e3cedb99b8b69f1bd89ff1c1f72efa567f0a441cf0f0f8f4c7e9bea14a40bc0aa42eef8e13742a810327b609c606f96065e9c2846d3fe28832f148dc0f21d5c698a5771be1ec31572c2471f0385094ce214c519b27b0c208d9a546d1f423204cd3a9d1eb87b3bfd82bc64acf0467da22a786e07c51cd1c50538e63ea4a93017b714d4df9cf5c797ed0b231f1d4364a0a5964c53a1c8ff434602ac909377bb2380ac6fe1cf3cc50f5e0421f63c084f11bf61776804a9a8454f761c999902d9a7b6cffa35ae8e42fa4936d11878e3157050476a2b16c022ac9e67f04a2c5f2d193cd51eaee05bfb08279b9e1330c3ebf4d9902e34d51e5bf1bea0943f6862e9870296a521bd5c494d9852b43d166bb865a4ffb95d9acf9974684aa09b822b2dc9802aa331c8bbcc99d5118078c72c10804af00a6c271aaf83afb3c30266d65591483a058b290114486ac057b129ba2dae3ceffe5df31975067cc4919e9a76567ea92a40e56097f6b39a58451076f6da66c1fda976b5f38258711ebed13a57106f5fe624dc1200cda5eaf9ce6b405b1f68335c844a6a3c28718ea1c656d515846d15c6df43eb2e7c4f866b3f939d37e13de4edd54665109a383ca27c2014de041e5b747918f3eafd43093d7e9fb49d0cb022b625ea72353f3af80eb9aefd3bfb16de4d081bd60b0f0b81657d1f26ae2bb199d7a1bb3015705676cfa79aa84c0e071dbf6e36a64cb1c5b51fc960adc4fbe804800b2418598a309a0a7099f51b037cc31520ba778458dc5f329436beaff41b0a5f499ffb9eadb93a073fb6a83b5ccf6abcbf365570a4c4ca94b585317e8624c9552fe93010a2e15ccfefb1ffd96d3bea29a899e85d0a32907be0b1118a1bbe6e4d6c0ff570274231354259b481b785a9b0f68aadf79b928aec7f5b32a9ee17cdfc0f6baf102950d5ff868e5d5eb889f38ace43682d519b34d6c1c9dbdf626682dadf92bff84e09eadbd85fd6d03baf78810c8ec1a10d1df5a14e6c6792802e97c97c3e34c5b0037bf07c2348e5b4c4c5f795c1e039cd2c451c2ed7f261dca0ac2ba1a9e3d54e560e2df61097e1d1ac5d09b971f7f524cf5b98c5e3a2f75ece68952772df4f92013bd1b96362876bb1b7feb6b9b25a53d3666c23e97c0a8c53c32d41377a9930f644507cc095ebc931f0290e2afbf6a7d554d91a7079942f366099f19555b16263645ed41de71a0689bb6e77ec457a5e3b33100d051db83f123aa487426982d1727d301762dd3f549be9127f34cbc20afd53b2ad0a85c4020276b41d1da55d7a4a454eefe631873a3751d388396cc45993102db0b0488b0cf478f2e8c15cdd34cd60c6755b3f315d0b91c2c0402ab6ace8612feb4f56b137fdad22f7c18143f97e3cb47289c47801e014bca58e3e016a9afc4a5cbc7e684de7204a41fffd08ab5ccd0c7304ed77cff1678c6f8cd85f25d4c14ec19448791fb59a334f1e81922e6171d7b8dac2a616ba42e2ad1b5ddd929c3eb9716d006f388d68dce928eff1954ce2201b202477216aa1cc4818428aa5b15cc170a36fc19d630892e43e406b4d1ea4fb73c2bc889b4df5ced098e1067617822dbf81e1e2020b09c6929046d0aaf845a4a90221203402285b5efec7c25e31a51266d512d25a5ffb32b27ad3787b440493695545e2946dbe35eb738e4a2145defbd32065b8ac038c80bcb84a0ea5b56300deaf89b6c6f61d218bd01e6610c449407787e65befcc58fdd2b5b051f9de1ea489a0d10d36e0aea3ada5b81cd6846bbb0fa432b28fcfdd2427559f6752409982d8b91a36f14172ef8da92d4fa4df328ed64ee34fdd51cb471e2e8526690fb09aad976583289837a6c210c08eb02302c0441f6c43d5ad83bf20e2e00de00d8cbbddba52b434fd85fd9ec962bc1edb6811f70d820018ce9643762ced91e0b3df53d20785406efb6cc103dc34653aa8b669df16b91b5604e21d41afe77307b2e93b9121084d94ba0abf8045eb99a41065698d260dad74f82f6992d998f7b8a28122d3fcc1dc034b880a5dad707b4dcf1d1e03e2e97418f406b0ca4024f0ad86a4b218ba3a6b426772046d0232a84ad9c67006fb68c8c9019ba464f552efd98ef460a355c63af7d9dfd8329d77ba4e4d90ccae0e65d30fac95cbc1520233671cd25aa2412c6deae0a2655d931af9fb636d49332145262a6a335ab0e987611d04a5a8ea1580405a6f148b8748e5310fcb3f9be903489c81d5ba2f674353b90decd7754909976e23e969294e5ee34ba8dd58e8775c22a09c5448c6fd9cd20d18ebe7db15e58451f1805b06d04e8c1366a201a0e81a80a5f6082ebbe0846e62c6ac806e44a1bdd0d699e690389f8d7910466c5ba9919140dbfc97f3e76f3780e68630818ab19d2f1815c57881d4633da91564f1c542bd5e3f0bdd6c489d19be99f2cb91e0c06b85c10ec3d648ac469b082fb36334f99d3d764b2e0595b3d2dda18f7d6f73271c9ccaf15cf9a32cb7b1217fa05b36b527219af30b91520516f2ff52e0fa21f3f1f941cee2803f4f9d23784617a67a07fad87077615f1ea7a2bfaf5e634cf9bcd80b1d488cbf2bcf50972666441d2fd171700db36de641389ade0f2e6fc83cba117f7d2f7868d420602a3e78a8e7197bbc263d010d907feec6368b416030a2929214e20f44d6702beb76ed4b7abd2af83562a2bdc779345575f623163cae384d9da83d2daff0cba0131e86c96cc58eb0e4927d5959067319ad6e879c014915fb46c53e60fa35bc492b555b4f97288e0cb2b6fdaf593ba56f6544f1896936f84b832b59abcce0487d025466505baaa89adcc289a42b04862f204e4df26b44853d4731f7800aae4b804d77ed06f90a9681d59095fa5befd23b236f54a2a17457f7912b6c22fd693fc38164c21d70e3dd0b6709ed477fadc0633f4aa91df82f60b5733c40e37bcf61504fed9876ce69486184a10cb8edf1b47dbe2a251ac7e873f60c6849ec8b9f84b8f3e82ba0fa1dd7a18e212c12fa39bad753c84611d24a2945e8a607df676b2499e7c199f98b9352e7b9bd7f166af4c0f78c087b93f365d3ab3990d2b6494ec21a8685c162b226b281ea1e7ef85d17341f5a210b5e3eb5ce261e087ce783a7655765554bdf8578a5379ce31a8727f8d28f574441432bac0e135da43658b5298a3283cbe6f229515078f179348866ad65b7e0c900e7bfa04b656ab25c6f3464a414a93094b94d14d6167d222e8e73f21d820134fd1e8783bc34b0eea65a72ddc33579cd85b89467b61556d136498f460658811a568daf50a348902817b01ec75906ff487a5d812d29fef2e9886fe81083342ef07d16e5429164fe4f9369b2901d6c2fe0a9c676fd9d9a17a65b557ddda59babf23a0b9a1c10c89acfef0e92398958facc0e5eb74d52231e591d683e8512c759971ffc46854f2bf3d7060bd695c3118fb26fc0b12337451b47433f9d8a865cf895b3302aeee1c300674ef761323795499899b34557318a4c5b0a8a7803952b8df197ab10280b384c7ff25e5d9723be05458fbc0156a543760062fdd2ea7e0028a6e223a1629eee212fa7e379324d79d666926cac4d502ff7e80cb575a77e518230cd950262101cdbbc8228c4303c49d75c839546168f6feaae9dff96184c29796a56eeee8db23941b07c0329d8c309ace76bb23757eb7f0b1acd43b5a4f77a554c3ae5a2066a702fea69921e3491d0ab1bf776207cc367f49349ee5884cc41dc83834a3acdf52fc583c859bebca126ff6d10abee772878d188176ebc529dc8a2a4ea078d1703c5605f3c9837a0d661b4f20dee668ee7d4cc008ff3fc8b13823bb5cd36a8241a43ad6533cfde21427a452335ad4e01906fe42c7949311c098b5d90a96cfe6f9d1930533b71f59d9c7ded26ea233e6310c4f6", 0x1000}}, 0x1006) r13 = syz_open_procfs(r9, &(0x7f0000006980)='net/kcm\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x3, &(0x7f00000069c0)) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000006a00)="a92097bf938d19a0ae42542aed1321065328204acff5605d80403f05a4b27538e3b18f8fa3d2adce2a5283bc5531678901a859b9a1abe90687fa791de8925e79dd853bb6", 0x44) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000006a80), 0x2) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000006bc0)={&(0x7f0000006ac0)=""/252, 0x1008000, 0x0, 0x32a, 0x1}, 0x20) 9.693369627s ago: executing program 5 (id=2551): openat$vmci(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$ttyS3(0xffffff9c, 0x0, 0x84140, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r3, 0x1, 0x2, &(0x7f0000000000)=""/166, &(0x7f00000000c0)=0xa6) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002b00000000004290"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0xfffffffe) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r6, 0xb}) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000100)={&(0x7f0000000380)="16226218684581441510234a60f13d173557bf867003d896fd7d3636bd21aaccb993d34ce8f7d1d8d93bb6e654c1beb3abd0bbba284bc63b516dfa8f4336cd708aa5ccd8ff25be36c12e7fb6c20decd51a9b54dd462c375910dca293cfbace5b16224627405ab47dc44d5acfdd1b8119a492ca6997cf01674a365e571d232d3facb12c686acf93437feb766fb80a2cc2793de4d8d2be04046a", 0x99}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xfffe, 0xaaa3}}, 0xa, &(0x7f0000000000)={0x0}, 0x7, 0x0, 0x0, 0x20044800}, 0x0) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x0, 0x575, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ba23610030478faffc5010203010902630501000000000904"], 0x0) 8.697692316s ago: executing program 4 (id=2554): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0xfffff107}], 0x1, 0x10122, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x1, 0xc21268d0491e3de4) write(r0, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) r1 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x326}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4000, @local}}, 0x3, 0x0, 0x4014, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fanotify_init(0x4, 0x2) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7, 0x40000) ioctl$VIDIOC_S_STD(r9, 0x80405600, &(0x7f00000001c0)=0x100) write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r10 = dup(r8) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7b}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x64b40, 0x0) fcntl$setlease(r11, 0x400, 0x0) r12 = dup(r5) fanotify_mark(r6, 0x1, 0x12, r12, 0x0) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f00000000c0), 0x0) ioctl$TIOCGPTPEER(r13, 0x5441, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="12010000fd9e1a40f30c74933b3c0000000109021b00011c00006162ae8fc1be71e59899b9c15d4b97932c385ddf5dcc7e7385f4fc466ae55bb0ae0025c3d7ffda5d25175ae85bc3e2444f43737a8c969bd7a06f6fb89996890d39e19e03fbb0e5913510aec160fd6f6b9017cacf8bd598c50c37cc69fb89c0df1d2125d5f6c2dc796b047a6c1d54f138305094b98b4dfb7470fb59169840e5ba8b503f9de2b2d1891de5be7d256d5c67ecc30b7eb6938ab7e4c6a6faf01cabdeb682ef910cb5e97abe8d28a29ea94f70c0a9f02ef418f9edf87f201cc0ffccbdc5b7000000", @ANYBLOB="353442926bc711d6650c14a52a527dea20c724f5fd17a1e3b331168f0f1dd14d96116e651cdf8ec6c7d9a6c3432cb1413e058e60c56f536e05ed37620f8149a3fcc45c184a2c7ab375b61d1d1cb9", @ANYRES16=r8], 0x0) 8.584612537s ago: executing program 1 (id=2555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000030000000000d171b7922591d51268f7fff23593"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) (async) listen(r1, 0x7926cf37) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)) (async) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095", @ANYRES64=r4, @ANYRES64=r2, @ANYRESOCT=r5, @ANYRESOCT=0x0, @ANYRESOCT=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 8.32135436s ago: executing program 1 (id=2557): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) fanotify_init(0x87, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x2, 0xb, 0x20}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000, 0xd000}}, "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", "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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000002c0)="b812010f00d836650f78a12d7f0f20d86635080000000f22d8ba40006766c7442400010000006766c7442402000000006766c744240600000000670f011c24baf80c66b8062e458966efbafc0ccf533a533abb5e66377c66377c698966efbafc0c66b80000000066ef0f00de0fb64b00c16a47e10ff24300", 0x78}], 0x1, 0xa, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000000)="9e972c", 0x3}], 0x1) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x141a42, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x100800001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) 6.566400506s ago: executing program 1 (id=2559): r0 = timerfd_create(0x0, 0x0) epoll_create1(0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) clock_adjtime(0x0, 0x0) 6.548183289s ago: executing program 7 (id=2560): personality(0x400000) (async, rerun: 64) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(r1, &(0x7f0000000100)=""/37, 0x25) (async) getpid() (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) r4 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x80, @broadcast}, 0x8) (async) accept4(r4, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket(0x200000000000011, 0x2, 0x407ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 6.281011058s ago: executing program 7 (id=2561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1b19c1, 0x0) r2 = socket(0xa, 0x3, 0x3a) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000008680)=""/102395, 0xffd6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRESDEC, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x1f00, 0x12) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x401, 0x2) sendmsg$rds(r9, 0x0, 0xc4) 6.276836203s ago: executing program 4 (id=2562): creat(&(0x7f00000002c0)='./file0\x00', 0x181) ioperm(0x5, 0x9, 0x9) setreuid(0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0xff7fffff, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x3}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYBLOB="00010000000000cd00"/26], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x86333fa437833b4e}, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) 6.246164131s ago: executing program 5 (id=2563): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f000068c000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x1) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x9, 0x5, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114000000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.908561074s ago: executing program 5 (id=2564): r0 = creat(&(0x7f0000001c40)='./file0\x00', 0x10) r1 = syz_io_uring_setup(0xecb, &(0x7f00000003c0)={0x0, 0x4bb6, 0x0, 0x0, 0xfffffffe}, &(0x7f00000002c0)=0x0, &(0x7f0000000780)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x64, 0x2, r0, 0x0, 0x0, 0x0, 0x60, 0x0, {0x3}}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=iTterleave=']) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 5.627382535s ago: executing program 6 (id=1878): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14026000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0800000000215400000012000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x4}, 0x0, {[0x0, 0xb8e, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='hfs\x00', 0x100000, &(0x7f0000000280)='fuse\x00') 3.136645401s ago: executing program 1 (id=2565): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x238, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x18, 0x5}}, @common=@dst={{0x48}, {0x9, 0x3, 0x1, [0x9, 0x3, 0x2, 0xfff9, 0xe100, 0xfffe, 0x352d, 0xbc9, 0x200, 0xfdd9, 0x5, 0xff06, 0x9, 0xe, 0x2, 0x4d19], 0xc}}]}, @REJECT={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff000000, 0x180000081, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'ip_vti0\x00', {}, {0xff}, 0x33, 0x8, 0x1, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x6044814) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000001740)={&(0x7f0000001680)=""/141, 0x8d}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) syz_80211_inject_frame(&(0x7f0000001780)=@device_b, &(0x7f00000017c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x629f}, @device_a, @device_a, @broadcast, {0x2, 0x9}, @broadcast, @void, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="f13e6c6fcb05bf00a597acb5e9801ee377d3b374657b17dc3d15e80cab817c47c7e165476901af45370b5e5dd7d86dd21ee0520496a10fce6178d4b87d763dfc33d706e5509a6e64a79d11544917ed0b6aae733461243ddcf9dc29b62288a75f784f1b72e4806569efe2bc29b5c23dca5b872816b2d8415a14df77bb3f2f727fb29a4bf6f3828c1d0db92eb16d7c69513e1a6f9839340634ad4bae2df611c9a981784e770f0b41ed3c372f2a84e95368e364d2283cd52270beb3685fdb260124afe0a57f382b356d9b11347e6fa43eb2b8f790f5e7564cfa58c8312060a503959635ea1390e72d1da1602f5aa648cb4980a0e872814accca30a7e74135ac270994ce4843d14fd652b40256b5108d7323b7bc530190a3a7bea456b09a0f22a4a9ba3af94567f8e3e14d5b5524a476e3c2073da8b7df8dba452601ffb1bdd00f2c6468fff17c919524a747a2445e66e6b3de7193b69f23c1d6ce076249473b4ccf85eac47de46308d52db7c981d9b167948f598134c9618e36770d0f4098e2313437e18a92c5de6de36bf29f5501feedb00b5a0629ae542a18"}, 0x1ba) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001e40)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x800, 0xfd5a}, &(0x7f0000001f00)=0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001f40)={r1, @in={{0x2, 0x4e20, @broadcast}}, 0x8, 0x3, 0x1, 0x6, 0x6, 0x5}, 0x9c) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x90) r3 = socket$isdn(0x22, 0x3, 0x11) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) 3.124352238s ago: executing program 5 (id=2566): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x200, 0x0) r4 = dup(r1) fanotify_mark(r3, 0x1, 0x4800107a, r2, 0x0) vmsplice(r4, &(0x7f0000000600)=[{&(0x7f0000000100)="04", 0x1}], 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000100), 0xfffffecc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r9, &(0x7f0000000000)=ANY=[@ANYRES16=r9], 0xc) r10 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2f7}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000009c0)=@IORING_OP_ACCEPT={0xd, 0x20, 0x0, r1, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=@ethernet={0x0, @link_local}, 0x0, 0x800}) io_uring_enter(r10, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r9, &(0x7f00000002c0)=@unlock_all, 0xb) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e20, 0x656d42c3, @remote, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x2c}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000380)=0xd) 3.118978427s ago: executing program 7 (id=2567): pipe(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x1000000}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x40) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="1800000039000517d25a80648c63940d0324fc600b003540", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001a0a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b84ffe4a8766efbafc0cb01aee0fa1baf80c66b85b62d78d66efbafc0cec3e660f73d8b6ba2100ed260ff8b8ab000fc7be007f3e26f30fc73066b9800000c00f326635002000000f30f3ab", 0x4f}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f00000005c0)={{r0}, "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"}) r7 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) 2.437195888s ago: executing program 4 (id=2568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fanotify_mark(r1, 0x80, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x4, 0x700000000000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) (async) fanotify_mark(r1, 0x80, 0x12, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x4, 0x700000000000000}, 0x0) (async) 2.313701316s ago: executing program 1 (id=2569): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = fanotify_init(0x8, 0x800) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r2 = getpid() mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r3, 0x2, 0x0, @void}, 0x10) r6 = socket$inet_dccp(0x2, 0x6, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r7 = syz_open_procfs$userns(r2, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000021e000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000062c0)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="61ff7c13b4485a970fe67fd8fa513d36e6b2255f5c029af5cbc2259494148c11594df3c0a7cb02edeef2a170450843b32cfe69cf17bcbc0af0183b6f5464658e2e0862861d3e708a2837f462f6ccd870c8", 0x51}, {&(0x7f0000001600)="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", 0x1009}], 0x2, &(0x7f0000003680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB], 0xb8, 0x20000041}}, {{&(0x7f0000004140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000006380)="32739dcf11d310da86897442b5e8bc70e6884d98fa50ff9d34e84811e70c192ca2f2aa0afc249df588f794730e9986c459d8228e3447d9943138985e58f90b16955540becd4f833b13a40aaf93be34fe128e688ed77e5047f7544af5f9ad73c5c27889325514c34e051ddafa00e7a22244c2e95c6c13e95f773691b363ca7152fbc2", 0x82}, {&(0x7f0000006440)="5eb433b416abbd9cd47c67d39f97a211f03e747801e77d4b46225e76e91c161a890948d02d9fd45d947738e0ca0dab4c19785f0b92363f00413d8bff4ff47ec125f61f8eef61928218bd4fc13440a5624981e2fef8a662744011429a438566be3d08605e9d79a47eec56b3b0929901c2d3b916f2b5add539818d7c6a2a3d2b0027850b4744644ff8a05f253f5162c749ee48e323b72a5838db402f9622eaaad8c17d44e1437b6de4d854f77f10b4e7967f44be0c43143a917a190f8d3f3e5deb9279a0f28cbd4077e888483c406fc42172ff3dbd970cdd410edff141e3f153552e2fafedf02ebb9cc847fe39a7cfcfc72677ab8bc0decc028f", 0xf9}], 0x2, &(0x7f0000006540)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r9, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000000000100000001000000000000000000", @ANYRES32=r5, @ANYRES32=r10, @ANYRES32, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r9, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x800}}], 0x2, 0x24000811) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f0000000280)={0xa, 0x4e20, 0xffffffff, @empty, 0x2}, 0x1c) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r12 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001eafabff7f08000000000002000000b900010070", @ANYRESHEX=r6, @ANYRES8=r2, @ANYRES8=r5], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) 2.311965332s ago: executing program 7 (id=2570): syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020200002025e6a0a440000102195029e75c0002010420480904000001020d0000052406000105240028090d240f0123000000ff0005000106241a66d2010905810308000406030904010000020d00000904010102020d000009058202080007080309050302100006060561f7d765a1d8fb8eb6ba120cdfa6786831459bca5545dfe27221ff0e27d7e3439a101aae486a980a685085dcd97c7f6771"], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2, {0x0, 0x8}}, 0x20) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) shutdown(r3, 0x1) 2.285442074s ago: executing program 4 (id=2571): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001d40)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000580)=""/136, 0x88}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f0000000a80)=""/20, 0x14}, {&(0x7f00000006c0)=""/31, 0x1f}], 0x5, &(0x7f0000000780)=""/253, 0xfd}, 0x3}, {{&(0x7f0000000880)=@qipcrtr, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/186, 0xba}], 0x1}, 0x3}, {{&(0x7f0000000ac0)=@tipc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/31, 0x1f}], 0x2, &(0x7f0000001b80)=""/25, 0x19}, 0x7fffffff}, {{&(0x7f0000001bc0)=@tipc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/192, 0xc0}], 0x1}, 0x2c}], 0x4, 0x40000020, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2a]}, 0x8) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, r3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.683115649s ago: executing program 7 (id=2572): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delvlan={0x64, 0x71, 0x200, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7f}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7f}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24045}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r2) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x10000) recvmsg$kcm(r4, &(0x7f00000006c0)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/15, 0xf}, {&(0x7f0000000580)=""/16, 0x10}], 0x4, &(0x7f0000000600)=""/160, 0xa0}, 0x20000002) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x60}}, 0xc1) ioctl$sock_ifreq(r2, 0x89b0, &(0x7f00000008c0)={'netpci0\x00', @ifru_addrs=@llc={0x1a, 0xf, 0x0, 0x0, 0x8, 0x0, @random="402fcb4b4c73"}}) bind$netlink(r5, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000a80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000b00)={r10, 0x1, 0xffffffffffffffff, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000b40), 0x40042, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000b80)={0xfffffff9, 0x9, 0x4, 0x800000, 0x14, "aaa918255acffe76b1955022ce3966aae74029"}) mmap$qrtrtun(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000006, 0x40010, r4, 0xc) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000bc0)) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000c00)=0x3) r12 = openat(r4, &(0x7f0000000c40)='./file0\x00', 0x880, 0x90) sendmsg$NFT_MSG_GETSET(r12, &(0x7f0000001100)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000000cc0)={0x3d0, 0xa, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_SET_EXPRESSIONS={0x38c, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6c}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x32}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf6}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'wpan4\x00'}]}}}, {0x29c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x100, 0x3, "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"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x95, 0x3, "a1a852a847d9f340564c593e781e03b665150dc7123039798d1dcc7471d095e1da983a26da54151f652cee1e290c8ee6cdba36850cd2bdb8285d8a934e464fc178518aee5d9c1a00cabb57c81a6646d805fda21783aaa13eb718789c6ec98f9bf55268014220467b512ba70bb805b5d7303c410b3b583a90cc54f14b647483b016b4f6723f35f595129ac2e48cff76c1c6"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x7e, 0x3, "556b8f451e021a20ecbfbd998715471f6997ffa52a733eb097ab61f685e4555ce2068c9f6f71e7af60f17a8ddfaacbb1eeac5b12bcd89ec0cb22a41ecefca0e55abfb90fadc4e08f16e10c449c11d10a22067325bf6321e7dd2eee2e8fe220993d7f57a28ef9b63b17d71f583b3bf5cce0bceaef782b8ad267a9"}, @NFTA_TARGET_INFO={0x45, 0x3, "a37bb7d8879d1d8749b49ce0b0dacaf068e0f935f4f8e34c15409b5228fe81a1b548e1174e2572e8a0f9f434596c71becf33f5be5493163b291933dbd4f0e972fa"}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x3d0}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001140), 0x40400, 0x0) 1.297733366s ago: executing program 1 (id=2573): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100ebeb7e9fdf564200de00c5716240920f01007d860000000109021b0001000000000904ab00011632e100"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r4], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_usb_connect(0x6, 0x0, 0x0, 0x0) (async) socket(0x1000000000000010, 0x80802, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100ebeb7e9fdf564200de00c5716240920f01007d860000000109021b0001000000000904ab00011632e100"], 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r4], 0x20}}, 0x0) (async) 990.860219ms ago: executing program 4 (id=2574): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) (async) r2 = io_uring_setup(0x5ff4, &(0x7f0000000400)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040100000000000000020000003c000480380001800e00e8ff686d6d656469617465000000240002801800028014000280080003400000000108000180fffffffc08000140000020000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) listen(r4, 0x1ad72f7) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) (async) recvmmsg(r1, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f0000000280)=""/200, 0xc8}], 0x2, &(0x7f0000000380)=""/161, 0xa1}, 0x6}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000058c0)=""/4102, 0x1000}, {&(0x7f00000014c0)=""/11, 0xb}, {&(0x7f0000005880)=""/18, 0x12}], 0x6, &(0x7f00000015c0)=""/4096, 0x1000}, 0x80000001}, {{&(0x7f00000025c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002640)=""/204, 0xcc}, {&(0x7f0000002740)=""/43, 0x2b}, {&(0x7f0000002780)=""/206, 0xce}, {&(0x7f0000002880)=""/227, 0xe3}], 0x4, &(0x7f00000029c0)=""/15, 0xf}, 0x8000}, {{&(0x7f0000002a00)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002a80)}], 0x1, &(0x7f0000002b00)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003b00)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003b80)=""/195, 0xc3}, {&(0x7f0000003c80)=""/233, 0xe9}, {&(0x7f0000003d80)=""/95, 0x5f}, {&(0x7f0000003e00)=""/119, 0xffffffe5}, {&(0x7f0000003e80)=""/215, 0xd7}], 0x5, &(0x7f0000004000)=""/179, 0xb3}, 0x89}, {{&(0x7f00000040c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004140)=""/114, 0x72}], 0x1, &(0x7f0000004200)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000005200)=""/143, 0x8f}, {&(0x7f00000052c0)=""/162, 0xa2}, {&(0x7f0000005380)=""/71, 0x47}, {&(0x7f0000005400)=""/245, 0xf5}], 0x4, &(0x7f0000005540)=""/194, 0xc2}, 0x464a}], 0x7, 0x0, &(0x7f0000005800)={0x77359400}) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0x6) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000005840)=0x8000) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x0, 0x0, 0x0, 0xe1e}) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0xfffffffffffffffa) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{'udp\x00'}]}) socket$can_raw(0x1d, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002a80), 0x208002, 0x0) 953.426996ms ago: executing program 7 (id=2575): r0 = timerfd_create(0x0, 0x0) epoll_create1(0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0xb, 0x8000000}) 0s ago: executing program 4 (id=2576): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet(0x2, 0x2, 0x0) shutdown(r7, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="7de7f8f15494991aa8a2f4c1b64d3f480db2924511d9d1dc0374f27125c63fd04387c21361bea218a5326c12a276294d5b6f0375d5ae40b9141f87a3023c3edfce9d564812592b9854e847491778cdd6109f074459d341", @ANYRES16=r8, @ANYBLOB="000327bd7000ffdbdf250300000008000400040000000800040080000000"], 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x0) kernel console output (not intermixed with test programs): [ T5883] usb 6-1: config 0 has no interface number 0 [ 712.595895][ T5883] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 712.595986][ T5883] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 712.596047][ T5883] usb 6-1: config 0 interface 41 has no altsetting 0 [ 712.603619][ T5883] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 712.603708][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.603768][ T5883] usb 6-1: Product: syz [ 712.603822][ T5883] usb 6-1: Manufacturer: syz [ 712.603877][ T5883] usb 6-1: SerialNumber: syz [ 712.680486][ T5883] usb 6-1: config 0 descriptor?? [ 712.684691][T16437] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 712.684861][T16437] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 712.917761][T16437] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 712.917843][T16437] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 713.159435][ T25] usb 2-1: USB disconnect, device number 123 [ 713.264189][ T57] hsr_slave_0: left promiscuous mode [ 713.292314][T16458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.356620][ T57] hsr_slave_1: left promiscuous mode [ 713.381766][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.493650][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.628822][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.764865][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.997598][ T5883] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 714.085280][ T57] veth1_macvtap: left promiscuous mode [ 714.102332][ T57] veth0_macvtap: left promiscuous mode [ 714.113136][ T57] veth1_vlan: left promiscuous mode [ 714.125889][ T57] veth0_vlan: left promiscuous mode [ 714.223863][T16480] input: syz0 as /devices/virtual/input/input79 [ 714.447261][ T5158] Bluetooth: hci4: command tx timeout [ 714.989220][ T57] team0 (unregistering): Port device team_slave_1 removed [ 715.052262][ T57] team0 (unregistering): Port device team_slave_0 removed [ 715.299640][T16482] block nbd1: shutting down sockets [ 715.928140][T16414] chnl_net:caif_netlink_parms(): no params data found [ 716.001578][ T5883] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 716.016005][ T5883] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 716.106795][ T5883] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 716.227237][ T5883] usb 6-1: USB disconnect, device number 93 [ 716.681703][ T5158] Bluetooth: hci4: command tx timeout [ 718.264080][ T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 718.410707][T16414] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.479503][T16414] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.739681][T16536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.894641][T16414] bridge_slave_0: entered allmulticast mode [ 718.901124][T16414] bridge_slave_0: entered promiscuous mode [ 718.907338][ T5158] Bluetooth: hci4: command tx timeout [ 718.990353][T16414] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.004274][ T9] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 719.013910][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.023769][ T9] usb 6-1: Product: syz [ 719.027931][ T9] usb 6-1: Manufacturer: syz [ 719.032495][ T9] usb 6-1: SerialNumber: syz [ 719.043045][ T9] usb 6-1: config 0 descriptor?? [ 719.052767][ T9] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 094 [ 719.068970][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.123487][T16414] bridge_slave_1: entered allmulticast mode [ 719.149353][T16414] bridge_slave_1: entered promiscuous mode [ 719.226635][T16545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2282'. [ 719.240207][T16414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.307597][T16414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.395864][T16414] team0: Port device team_slave_0 added [ 719.403045][ T29] audit: type=1326 audit(2269408030.071:10250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 719.438469][T16414] team0: Port device team_slave_1 added [ 719.480144][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.488803][ T9] (null): failure reading functionality [ 719.504358][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.519682][ T29] audit: type=1326 audit(2269408030.071:10251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 719.555347][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 719.583231][T16414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.613968][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.759800][T16414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.842624][T16414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.854485][ T29] audit: type=1326 audit(2269408030.501:10252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 720.498127][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.529308][ T29] audit: type=1326 audit(2269408030.501:10253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 720.794854][T16414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.865495][ T9] usb 6-1: USB disconnect, device number 94 [ 720.963730][ T29] audit: type=1326 audit(2269408031.530:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 720.991511][T16414] hsr_slave_0: entered promiscuous mode [ 721.002196][T16414] hsr_slave_1: entered promiscuous mode [ 721.011833][T16414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.019504][T16414] Cannot create hsr debugfs directory [ 721.035764][ T29] audit: type=1326 audit(2269408031.530:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 721.059649][ T29] audit: type=1326 audit(2269408031.530:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 721.083375][ T29] audit: type=1326 audit(2269408031.530:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d33d7e819 code=0x7ffc0000 [ 721.107121][ T29] audit: type=1326 audit(2269408031.530:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d33d7d1b0 code=0x7ffc0000 [ 721.131279][ T29] audit: type=1326 audit(2269408031.530:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0d33d80047 code=0x7ffc0000 [ 722.179627][ T5830] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 722.203432][T16590] tmpfs: Unknown parameter 'usrquo_block_hardlimit' [ 722.336963][ T5830] usb 6-1: device descriptor read/64, error -71 [ 723.423693][ T5830] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 723.587844][ T5880] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 723.598406][ T5830] usb 6-1: device descriptor read/64, error -71 [ 723.717636][ T5830] usb usb6-port1: attempt power cycle [ 723.727186][T16414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 723.745826][T16414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 723.756009][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 723.776726][ T5880] usb 5-1: not running at top speed; connect to a high speed hub [ 723.797388][T16414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 723.811830][ T5880] usb 5-1: config 15 has an invalid interface number: 168 but max is 0 [ 723.821845][ T5880] usb 5-1: config 15 has no interface number 0 [ 723.834564][ T5880] usb 5-1: config 15 interface 168 has no altsetting 0 [ 723.849889][T16414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 723.860409][ T5880] usb 5-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 723.879413][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.893673][ T5880] usb 5-1: Product: syz [ 723.898110][ T5880] usb 5-1: Manufacturer: syz [ 723.902935][ T5880] usb 5-1: SerialNumber: syz [ 723.940506][ T25] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 724.018358][T16414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.078237][T16414] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.101490][ T5830] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 724.113366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.120451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.135037][ T25] usb 2-1: New USB device found, idVendor=12d1, idProduct=ca74, bcdDevice= c.d7 [ 724.146261][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.160956][ T25] usb 2-1: Product: syz [ 724.172647][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.179751][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.188956][ T5830] usb 6-1: device descriptor read/8, error -71 [ 724.195190][ T25] usb 2-1: Manufacturer: syz [ 724.202059][ T25] usb 2-1: SerialNumber: syz [ 724.216108][ T25] usb 2-1: config 0 descriptor?? [ 724.225304][ T25] huawei_cdc_ncm 2-1:0.0: CDC Union missing and no IAD found [ 724.257989][ T25] huawei_cdc_ncm 2-1:0.0: bind() failure [ 724.439080][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.454069][ T5830] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 724.468250][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.500725][ T5830] usb 6-1: device descriptor read/8, error -71 [ 724.540712][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.581171][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.583028][ T5880] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 724.621695][ T5883] usb 2-1: USB disconnect, device number 124 [ 724.628287][ T5830] usb usb6-port1: unable to enumerate USB device [ 724.643694][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 724.686230][ T5880] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 724.718850][ T5880] usb 5-1: media controller created [ 724.754266][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.811072][T16414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.922835][ T5880] DVB: Unable to find symbol dib7000p_attach() [ 724.951029][ T5880] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 724.980310][T16651] xt_hashlimit: max too large, truncated to 1048576 [ 725.116577][ T5880] rc_core: IR keymap rc-dib0700-rc5 not found [ 725.148544][ T5880] Registered IR keymap rc-empty [ 725.188902][ T5880] dvb-usb: could not initialize remote control. [ 725.219390][ T5880] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 725.249458][ T5880] usb 5-1: USB disconnect, device number 107 [ 725.271219][ T5880] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 725.571995][T16414] veth0_vlan: entered promiscuous mode [ 725.591153][T16414] veth1_vlan: entered promiscuous mode [ 725.645854][T16414] veth0_macvtap: entered promiscuous mode [ 725.712878][T16414] veth1_macvtap: entered promiscuous mode [ 725.778094][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.817929][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.860796][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.895828][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.909073][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.921941][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.933226][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.945491][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.968241][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.002752][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.041485][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.078616][ T5830] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 726.078954][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.133602][T16414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.166011][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.209361][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.233244][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.249878][ T5830] usb 5-1: device descriptor read/64, error -71 [ 726.252399][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.266684][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.287279][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.297781][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.308636][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.336674][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.351933][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.368021][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.378754][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.390145][T16414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.412462][T16414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.433255][T16414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.445602][T16414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.454993][T16414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.517185][ T5830] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 726.548552][ T3066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.556654][ T5883] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 726.566207][ T3066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.590024][ T6608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.599867][ T6608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.666757][ T5830] usb 5-1: device descriptor read/64, error -71 [ 726.753451][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 726.772748][ T5883] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 726.793634][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.802369][ T5830] usb usb5-port1: attempt power cycle [ 726.809659][ T5883] usb 6-1: Product: syz [ 726.813894][ T5883] usb 6-1: Manufacturer: syz [ 726.825170][ T5883] usb 6-1: SerialNumber: syz [ 726.836527][ T5883] usb 6-1: config 0 descriptor?? [ 726.844701][ T5883] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 727.169259][ T5830] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 727.237872][ T5830] usb 5-1: device descriptor read/8, error -71 [ 727.443412][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.453544][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.464667][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.473365][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.484371][ T5883] gspca_sn9c2028: read1 error -71 [ 727.494736][ T5883] gspca_sn9c2028: read1 error -71 [ 727.499832][ T5883] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 727.530196][ T5883] usb 6-1: USB disconnect, device number 99 [ 727.680557][ T5830] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 727.715120][ T5830] usb 5-1: device descriptor read/8, error -71 [ 727.832492][ T5830] usb usb5-port1: unable to enumerate USB device [ 728.380417][T16710] IPVS: set_ctl: invalid protocol: 47 172.30.1.6:20001 [ 728.545343][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.667271][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.759493][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.824272][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.866480][ T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 728.952754][ T12] bridge_slave_1: left allmulticast mode [ 728.959845][ T12] bridge_slave_1: left promiscuous mode [ 728.968137][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.977634][ T12] bridge_slave_0: left allmulticast mode [ 728.983364][ T12] bridge_slave_0: left promiscuous mode [ 728.992208][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.354255][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.367772][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.378231][ T12] bond0 (unregistering): Released all slaves [ 729.981133][ T12] hsr_slave_0: left promiscuous mode [ 730.008799][ T12] hsr_slave_1: left promiscuous mode [ 730.031789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.056436][ T5880] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 730.069558][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.096446][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.122836][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.162439][ T5830] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 730.290722][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 730.306441][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 730.795762][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.797213][ T12] veth1_macvtap: left promiscuous mode [ 730.809378][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.832823][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.845875][ T5880] usb 5-1: Product: syz [ 730.862882][ T12] veth0_macvtap: left promiscuous mode [ 730.868592][ T5880] usb 5-1: Manufacturer: syz [ 730.876531][ T12] veth1_vlan: left promiscuous mode [ 730.882113][ T5880] usb 5-1: SerialNumber: syz [ 730.889015][ T12] veth0_vlan: left promiscuous mode [ 730.925710][ T5830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.941891][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.953569][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.962762][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.971334][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.981369][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 730.990797][ T5830] usb 2-1: not running at top speed; connect to a high speed hub [ 730.991005][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.037014][ T5830] usb 2-1: config 15 has an invalid interface number: 5 but max is 0 [ 731.058295][ T5830] usb 2-1: config 15 has no interface number 0 [ 731.082087][ T5830] usb 2-1: New USB device found, idVendor=6b62, idProduct=7002, bcdDevice=f0.ca [ 731.091370][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.123733][ T5830] usb 2-1: Product: syz [ 731.124138][T16730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.138205][T16730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.143426][ T5830] usb 2-1: Manufacturer: syz [ 731.190206][ T5830] usb 2-1: SerialNumber: syz [ 731.253014][ T5880] usb 5-1: bad CDC descriptors [ 731.270252][ T5880] usb 5-1: USB disconnect, device number 112 [ 731.734001][ T5880] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 731.765343][ T12] team0 (unregistering): Port device team_slave_1 removed [ 731.808524][ T12] team0 (unregistering): Port device team_slave_0 removed [ 731.943959][ T5880] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 731.962371][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.971498][ T5880] usb 5-1: Product: syz [ 731.975762][ T5880] usb 5-1: Manufacturer: syz [ 731.985874][ T5880] usb 5-1: SerialNumber: syz [ 732.001934][ T5880] usb 5-1: config 0 descriptor?? [ 732.016907][ T5880] ch341 5-1:0.0: ch341-uart converter detected [ 732.620332][T16756] syz.5.2320 (16756): /proc/16755/oom_adj is deprecated, please use /proc/16755/oom_score_adj instead. [ 732.939971][ T25] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 733.124298][ T25] usb 6-1: device descriptor read/64, error -71 [ 733.167171][ T5880] usb 5-1: failed to receive control message: -110 [ 733.174158][ T5880] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 733.239744][T16741] chnl_net:caif_netlink_parms(): no params data found [ 733.252142][ T5833] Bluetooth: hci4: command tx timeout [ 733.392210][ T25] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 733.398019][ T5880] usb 2-1: USB disconnect, device number 125 [ 733.494837][ T1197] usb 5-1: USB disconnect, device number 113 [ 733.501742][ T1197] ch341 5-1:0.0: device disconnected [ 733.508009][T16741] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.516456][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.524169][T16741] bridge_slave_0: entered allmulticast mode [ 733.562538][ T25] usb 6-1: device descriptor read/64, error -71 [ 734.097588][T16741] bridge_slave_0: entered promiscuous mode [ 734.113925][T16741] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.175755][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.201032][T16741] bridge_slave_1: entered allmulticast mode [ 734.221713][T16741] bridge_slave_1: entered promiscuous mode [ 734.228921][ T25] usb usb6-port1: attempt power cycle [ 734.291370][T16741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.323306][T16741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.438446][T16741] team0: Port device team_slave_0 added [ 734.476801][T16741] team0: Port device team_slave_1 added [ 734.549793][T16741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.556993][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.620542][ T25] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 734.626145][T16741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.685656][T16741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.695262][ T25] usb 6-1: device descriptor read/8, error -71 [ 734.696206][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.742874][T16741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.884503][T16741] hsr_slave_0: entered promiscuous mode [ 734.919337][T16741] hsr_slave_1: entered promiscuous mode [ 734.951290][T16741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.988101][T16741] Cannot create hsr debugfs directory [ 735.294007][ T25] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 735.383786][T16823] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 735.394720][T16823] UDF-fs: Scanning with blocksize 512 failed [ 735.406698][T16823] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 735.418320][T16823] UDF-fs: Scanning with blocksize 1024 failed [ 735.426904][T16823] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 735.435428][T16823] UDF-fs: Scanning with blocksize 2048 failed [ 735.443623][T16823] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 735.451132][T16823] UDF-fs: Scanning with blocksize 4096 failed [ 735.554289][ T5833] Bluetooth: hci4: command tx timeout [ 735.921083][ T25] usb 6-1: device descriptor read/8, error -71 [ 737.188418][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 737.188432][ T29] audit: type=1400 audit(2403625774.717:10279): avc: denied { bind } for pid=16816 comm="syz.4.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 737.291842][ T25] usb usb6-port1: unable to enumerate USB device [ 737.821092][ T5833] Bluetooth: hci4: command tx timeout [ 738.740424][T16741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 738.784307][T16741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 738.921223][T16741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 738.968047][T16881] overlayfs: missing 'lowerdir' [ 739.076956][T16741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 739.670595][T16741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.685362][T16741] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.706520][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.713634][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.010678][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2341'. [ 740.070689][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.077864][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.098373][ T5833] Bluetooth: hci4: command tx timeout [ 740.104803][ T5880] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 740.653361][T16741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.701746][ T5880] usb 5-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 740.756825][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.776190][T16902] nft_compat: unsupported protocol 5 [ 741.230139][ T5880] usb 5-1: Product: syz [ 741.234354][ T5880] usb 5-1: Manufacturer: syz [ 741.248594][ T5880] usb 5-1: SerialNumber: syz [ 741.366394][ T5880] usb 5-1: config 0 descriptor?? [ 741.796909][ T5880] cdc_subset 5-1:0.0: probe with driver cdc_subset failed with error -22 [ 741.837914][T16741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.968733][T16957] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2346'. [ 743.152447][ T29] audit: type=1400 audit(2403625780.292:10280): avc: denied { write } for pid=16907 comm="syz.1.2344" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 743.211848][T16741] veth0_vlan: entered promiscuous mode [ 743.403406][T16741] veth1_vlan: entered promiscuous mode [ 743.522715][T16741] veth0_macvtap: entered promiscuous mode [ 743.594958][ T5830] usb 5-1: USB disconnect, device number 114 [ 743.604346][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 743.618739][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 743.638002][T16741] veth1_macvtap: entered promiscuous mode [ 743.665771][T16997] ceph: No mds server is up or the cluster is laggy [ 743.707497][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 743.757482][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 743.769333][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.850526][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.873946][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.913041][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.923372][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.972478][ T5830] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 743.992551][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.016533][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.032709][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.043129][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.056589][ T29] audit: type=1800 audit(2403625781.134:10281): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2350" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 744.072932][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.105376][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 744.111960][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 744.141609][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.152649][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.166218][T16741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.172887][ T5830] usb 5-1: config 0 has an invalid interface number: 12 but max is 1 [ 744.183224][ T5830] usb 5-1: config 0 has an invalid interface number: 209 but max is 1 [ 744.197660][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.209180][ T5830] usb 5-1: config 0 has no interface number 0 [ 744.215392][ T5830] usb 5-1: config 0 has no interface number 1 [ 744.221590][ T5830] usb 5-1: New USB device found, idVendor=04ce, idProduct=0002, bcdDevice= 2.0c [ 744.230649][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.247280][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.258186][ T5830] usb 5-1: config 0 descriptor?? [ 744.272413][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.273081][ T5830] usb-storage 5-1:0.12: USB Mass Storage device detected [ 744.295047][ T5830] usb-storage 5-1:0.12: Quirks match for vid 04ce pid 0002: 4010 [ 744.323135][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.368962][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.379673][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.389709][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.400368][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.410387][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.421699][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.432824][T16741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.444476][T16741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.524919][T16741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.563791][ T5830] usb-storage 5-1:0.209: USB Mass Storage device detected [ 744.575802][ T5830] usb-storage 5-1:0.209: Quirks match for vid 04ce pid 0002: 4010 [ 744.590437][ T7425] bond0: (slave bond_slave_0): interface is now down [ 744.595203][T16741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.607602][ T7425] bond0: (slave bond_slave_1): interface is now down [ 744.651871][T16741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.660890][T16741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.669765][T16741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.690455][ T7425] bond0: (slave netdevsim0): interface is now down [ 744.725251][ T7425] bond0: (slave bond_slave_0): interface is now down [ 744.731938][ T7425] bond0: (slave bond_slave_1): interface is now down [ 744.738866][ T7425] bond0: (slave netdevsim0): interface is now down [ 744.777349][ T7425] bond0: (slave bond_slave_0): interface is now down [ 744.814820][ T7425] bond0: (slave bond_slave_1): interface is now down [ 744.852667][ T7425] bond0: (slave netdevsim0): interface is now down [ 744.894104][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.894126][ T7425] bond0: (slave bond_slave_0): interface is now down [ 744.935664][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.951279][ T7425] bond0: (slave bond_slave_1): interface is now down [ 744.959541][ T7425] bond0: (slave netdevsim0): interface is now down [ 744.986616][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.992606][ T7425] bond0: now running without any active interface! [ 745.011531][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.715729][T17073] netlink: 'syz.1.2359': attribute type 1 has an invalid length. [ 745.854057][ T7425] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.008295][ T7425] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.048668][ T5880] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 746.100903][ T7425] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.223515][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 746.235620][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 746.260562][ T7425] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.281818][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 746.308919][ T5880] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 746.318708][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.354207][ T5880] usb 6-1: Product: syz [ 746.384497][ T5880] usb 6-1: Manufacturer: syz [ 746.406186][ T5880] usb 6-1: SerialNumber: syz [ 746.457296][ T5880] usb 6-1: config 0 descriptor?? [ 746.478233][ T7425] bridge_slave_1: left allmulticast mode [ 746.483949][ T7425] bridge_slave_1: left promiscuous mode [ 746.492355][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.538787][ T5880] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 746.552470][ T5880] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 746.577018][ T7425] bridge_slave_0: left allmulticast mode [ 746.587504][ T7425] bridge_slave_0: left promiscuous mode [ 746.601146][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.771883][ T9] usb 5-1: USB disconnect, device number 115 [ 747.125234][ T5880] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 747.132889][ T5880] em28xx 6-1:0.0: Config register raw data: 0x41 [ 747.308916][ T7425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.322736][ T7425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.333156][ T7425] bond0 (unregistering): Released all slaves [ 747.357250][ T5924] usb 6-1: USB disconnect, device number 104 [ 747.364050][ T5924] em28xx 6-1:0.0: Disconnecting em28xx [ 747.373161][ T5924] em28xx 6-1:0.0: Freeing device [ 747.610889][ T29] audit: type=1400 audit(2403625784.455:10282): avc: denied { listen } for pid=17084 comm="syz.7.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 747.815836][T17102] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 747.896786][T17102] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2366'. [ 748.141003][T17115] ubi: mtd0 is already attached to ubi0 [ 748.529162][ T5830] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 749.276304][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.292184][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.322620][ T7425] hsr_slave_0: left promiscuous mode [ 749.343054][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.353996][ T7425] hsr_slave_1: left promiscuous mode [ 749.375487][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.389284][ T5158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 749.399452][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 749.421192][ T5830] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 749.432664][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.438608][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.460362][ T5830] usb 5-1: config 0 descriptor?? [ 749.462227][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.475020][ T5830] cp210x 5-1:0.0: cp210x converter detected [ 749.519751][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.674495][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.946906][ T5830] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 749.969825][ T5830] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 749.973900][ T7425] veth1_macvtap: left promiscuous mode [ 749.988401][ T5830] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 750.029778][ T5830] usb 5-1: cp210x converter now attached to ttyUSB0 [ 750.043868][ T7425] veth0_macvtap: left promiscuous mode [ 750.053277][ T7425] veth1_vlan: left promiscuous mode [ 750.062813][ T7425] veth0_vlan: left promiscuous mode [ 750.072955][ T5830] usb 5-1: USB disconnect, device number 116 [ 750.863169][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 750.882930][ T5830] cp210x 5-1:0.0: device disconnected [ 751.372686][ T29] audit: type=1400 audit(2403625787.972:10283): avc: denied { map } for pid=17132 comm="syz.1.2372" path="socket:[63952]" dev="sockfs" ino=63952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 751.555133][ T5833] Bluetooth: hci4: command tx timeout [ 751.915586][ T29] audit: type=1400 audit(2403625788.486:10284): avc: denied { setattr } for pid=17144 comm="syz.7.2375" name="NETLINK" dev="sockfs" ino=62359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 752.332684][ T8] usb 6-1: new low-speed USB device number 105 using dummy_hcd [ 752.566584][ T8] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 752.574834][ T8] usb 6-1: config 0 has no interface number 0 [ 752.621054][ T8] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 753.196446][ T8] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 753.207270][ T8] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 753.216401][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.231171][ T8] usb 6-1: config 0 descriptor?? [ 753.237533][T17145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 753.269222][ T8] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 753.474362][ T8] usb 6-1: USB disconnect, device number 105 [ 753.488496][ T8] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 753.831018][ T5833] Bluetooth: hci4: command tx timeout [ 754.029473][ T7425] team0 (unregistering): Port device team_slave_1 removed [ 754.088010][ T7425] team0 (unregistering): Port device team_slave_0 removed [ 754.238083][ T8] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 754.398608][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 754.417081][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 754.451788][ T8] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 754.464607][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.478130][ T8] usb 6-1: Product: syz [ 754.482960][ T8] usb 6-1: Manufacturer: syz [ 754.491049][ T8] usb 6-1: SerialNumber: syz [ 754.509963][ T8] usb 6-1: config 0 descriptor?? [ 754.518087][T17168] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 754.526140][ T8] hub 6-1:0.0: bad descriptor, ignoring hub [ 754.542539][ T8] hub 6-1:0.0: probe with driver hub failed with error -5 [ 754.569900][ T8] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input82 [ 754.846247][ T8] usb 6-1: USB disconnect, device number 106 [ 754.852345][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 755.880542][ T29] audit: type=1400 audit(2537843520.198:10285): avc: denied { call } for pid=17181 comm="syz.5.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 755.912337][T17184] netlink: 'syz.5.2385': attribute type 13 has an invalid length. [ 755.975884][T17184] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2385'. [ 756.001781][ T5833] Bluetooth: hci4: command tx timeout [ 757.003428][T17120] chnl_net:caif_netlink_parms(): no params data found [ 758.101918][T17120] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.121387][T17120] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.146096][T17120] bridge_slave_0: entered allmulticast mode [ 758.168535][T17120] bridge_slave_0: entered promiscuous mode [ 758.188772][T17120] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.204161][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.212124][T17120] bridge_slave_1: entered allmulticast mode [ 758.222519][T17120] bridge_slave_1: entered promiscuous mode [ 758.229816][ T5833] Bluetooth: hci4: command tx timeout [ 758.295890][ T5830] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 758.432193][T17120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.487456][T17120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.499903][T17236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2397'. [ 758.607971][T17238] FAULT_INJECTION: forcing a failure. [ 758.607971][T17238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.652978][T17238] CPU: 0 UID: 0 PID: 17238 Comm: syz.1.2398 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 758.663404][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 758.673451][T17238] Call Trace: [ 758.676728][T17238] [ 758.679645][T17238] dump_stack_lvl+0x16c/0x1f0 [ 758.684305][T17238] should_fail_ex+0x497/0x5b0 [ 758.688976][T17238] _copy_from_user+0x2e/0xd0 [ 758.693544][T17238] move_addr_to_kernel+0x68/0x160 [ 758.698541][T17238] __copy_msghdr+0x386/0x470 [ 758.703104][T17238] copy_msghdr_from_user+0xc2/0x160 [ 758.708275][T17238] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 758.714062][T17238] ___sys_sendmsg+0xff/0x1e0 [ 758.718626][T17238] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.723811][T17238] ? __pfx_lock_release+0x10/0x10 [ 758.728808][T17238] ? trace_lock_acquire+0x146/0x1e0 [ 758.733989][T17238] ? __fget_files+0x206/0x3a0 [ 758.738645][T17238] __sys_sendmsg+0x16e/0x220 [ 758.743209][T17238] ? __pfx___sys_sendmsg+0x10/0x10 [ 758.748298][T17238] do_syscall_64+0xcd/0x250 [ 758.752777][T17238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.758647][T17238] RIP: 0033:0x7f0d33d7e819 [ 758.763034][T17238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.782653][T17238] RSP: 002b:00007f0d34ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.791568][T17238] RAX: ffffffffffffffda RBX: 00007f0d33f35fa0 RCX: 00007f0d33d7e819 [ 758.799516][T17238] RDX: 0000000024040084 RSI: 0000000020000140 RDI: 0000000000000003 [ 758.807462][T17238] RBP: 00007f0d34ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 758.815405][T17238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.823348][T17238] R13: 0000000000000000 R14: 00007f0d33f35fa0 R15: 00007ffc1d71ded8 [ 758.831299][T17238] [ 758.934099][T17120] team0: Port device team_slave_0 added [ 758.955033][T17120] team0: Port device team_slave_1 added [ 758.989105][T17120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.004036][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.068446][T17120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.119099][T17120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.132821][T17243] kAFS: No cell specified [ 759.140687][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.209983][T17120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.268808][T17120] hsr_slave_0: entered promiscuous mode [ 759.282289][T17120] hsr_slave_1: entered promiscuous mode [ 759.290973][T17120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.307681][T17120] Cannot create hsr debugfs directory [ 759.393612][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.433457][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 759.608099][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 759.617483][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 759.649432][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 759.661010][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.685519][ T9] usb 2-1: Product: syz [ 759.689684][ T9] usb 2-1: Manufacturer: syz [ 759.740377][ T9] usb 2-1: SerialNumber: syz [ 759.772618][ T9] usb 2-1: config 0 descriptor?? [ 759.811354][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 760.085978][T17120] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 760.099721][T17120] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 760.115972][T17120] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 760.237316][T17120] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 761.266289][ T9] gspca_zc3xx: reg_w_i err -110 [ 761.280911][T17260] Invalid ELF header magic: != ELF [ 761.306467][ T29] audit: type=1804 audit(2806278981.244:10286): pid=17260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2404" name="/newroot/242/bus/bus" dev="overlay" ino=1314 res=1 errno=0 [ 761.351446][T17120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.382220][T17120] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.458959][ T29] audit: type=1400 audit(2806278981.244:10287): avc: denied { module_load } for pid=17257 comm="syz.5.2404" path="/242/bus/bus" dev="overlay" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 761.494870][ T957] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.501992][ T957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.513974][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.521087][ T957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.531761][ T29] audit: type=1400 audit(2806278981.328:10288): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 761.841567][T17277] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 761.849148][T17277] UDF-fs: Scanning with blocksize 512 failed [ 761.859020][T17277] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 761.866642][T17277] UDF-fs: Scanning with blocksize 1024 failed [ 761.875493][T17277] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 761.883115][T17277] UDF-fs: Scanning with blocksize 2048 failed [ 761.891355][T17277] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 761.899112][T17277] UDF-fs: Scanning with blocksize 4096 failed [ 762.013200][ T957] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 762.034324][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 762.040817][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 762.068729][T17120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.253597][T17120] veth0_vlan: entered promiscuous mode [ 762.263062][T17120] veth1_vlan: entered promiscuous mode [ 762.303290][T17120] veth0_macvtap: entered promiscuous mode [ 762.323539][T17120] veth1_macvtap: entered promiscuous mode [ 762.356533][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.385992][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.410672][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.444653][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.454796][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.468570][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.478945][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.492857][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.509023][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.526719][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.537957][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.550643][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.584283][T17120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.607179][T17294] FAULT_INJECTION: forcing a failure. [ 762.607179][T17294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.645654][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.669386][T17294] CPU: 0 UID: 0 PID: 17294 Comm: syz.4.2410 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 762.679821][T17294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 762.689869][T17294] Call Trace: [ 762.693127][T17294] [ 762.696039][T17294] dump_stack_lvl+0x16c/0x1f0 [ 762.700713][T17294] should_fail_ex+0x497/0x5b0 [ 762.705367][T17294] _copy_to_user+0x32/0xd0 [ 762.709761][T17294] simple_read_from_buffer+0xd0/0x160 [ 762.715115][T17294] proc_fail_nth_read+0x198/0x270 [ 762.720118][T17294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.725643][T17294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.731168][T17294] vfs_read+0x1df/0xbe0 [ 762.735299][T17294] ? __fget_files+0x1fc/0x3a0 [ 762.739953][T17294] ? __pfx___mutex_lock+0x10/0x10 [ 762.744957][T17294] ? __pfx_vfs_read+0x10/0x10 [ 762.749612][T17294] ? __fget_files+0x206/0x3a0 [ 762.754267][T17294] ksys_read+0x12b/0x250 [ 762.758486][T17294] ? __pfx_ksys_read+0x10/0x10 [ 762.763236][T17294] do_syscall_64+0xcd/0x250 [ 762.767714][T17294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.773586][T17294] RIP: 0033:0x7fa834d7d25c [ 762.777976][T17294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 762.797654][T17294] RSP: 002b:00007fa835b7d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 762.806044][T17294] RAX: ffffffffffffffda RBX: 00007fa834f35fa0 RCX: 00007fa834d7d25c [ 762.813990][T17294] RDX: 000000000000000f RSI: 00007fa835b7d0a0 RDI: 0000000000000005 [ 762.821936][T17294] RBP: 00007fa835b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 762.829893][T17294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.837839][T17294] R13: 0000000000000000 R14: 00007fa834f35fa0 R15: 00007fffccc55dc8 [ 762.845797][T17294] [ 762.849604][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.866754][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.877270][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.887119][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.910997][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.928031][ T9] usb 2-1: USB disconnect, device number 126 [ 762.939499][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.967258][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.982811][ T29] audit: type=1400 audit(2806278982.815:10289): avc: denied { read } for pid=17295 comm="syz.5.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 763.020777][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.046290][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.073927][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.099840][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.120135][T17120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.128849][T17120] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.142636][T17120] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.156346][T17120] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.168436][T17120] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.193481][T17303] wg2: entered promiscuous mode [ 763.205877][T17303] wg2: entered allmulticast mode [ 763.270855][ T7425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.296820][ T7425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.332219][ T7425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.343182][ T7425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.476432][ T5830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 763.484170][ T5830] usb 5-1: no configurations [ 763.506074][ T5830] usb 5-1: can't read configurations, error -22 [ 763.507142][ T9] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 763.685272][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 763.701321][ T9] usb 2-1: config 1 interface 0 altsetting 125 endpoint 0x82 has invalid maxpacket 495, setting to 64 [ 763.716020][ T9] usb 2-1: config 1 interface 0 altsetting 125 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.734548][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 763.770786][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.781654][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.797421][ T9] usb 2-1: Product: syz [ 763.809281][ T9] usb 2-1: Manufacturer: syz [ 763.817040][ T9] usb 2-1: SerialNumber: syz [ 763.834953][ T9] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 763.864663][ T9] usb 2-1: no configuration chosen from 1 choice [ 764.143585][ T29] audit: type=1400 audit(3074714439.922:10290): avc: denied { ioctl } for pid=17323 comm="syz.5.2419" path="socket:[66292]" dev="sockfs" ino=66292 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 764.197661][T17326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.449665][T17329] bridge0: port 3(erspan0) entered blocking state [ 764.456139][T17329] bridge0: port 3(erspan0) entered disabled state [ 764.462807][T17329] erspan0: entered allmulticast mode [ 764.468751][T17329] erspan0: entered promiscuous mode [ 764.474284][T17329] bridge0: port 3(erspan0) entered blocking state [ 764.482474][T17329] bridge0: port 3(erspan0) entered forwarding state [ 764.960812][ T29] audit: type=1400 audit(3074714440.689:10291): avc: denied { accept } for pid=17340 comm="syz.7.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 765.120894][ T9] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 765.304020][ T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 765.318890][ T4185] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.334559][ T9] usb 5-1: config 0 has no interface number 0 [ 765.355801][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 765.365254][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.383873][ T9] usb 5-1: Product: syz [ 765.389380][ T9] usb 5-1: Manufacturer: syz [ 765.394053][ T9] usb 5-1: SerialNumber: syz [ 765.410764][ T9] usb 5-1: config 0 descriptor?? [ 765.516260][ T5830] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 765.689043][ T5830] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 765.700214][ T5830] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 765.710219][ T5830] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.719378][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.738186][T17352] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 765.761207][ T5830] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.860148][T17344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 765.866701][T17344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 765.894353][T17344] vhci_hcd vhci_hcd.0: Device attached [ 765.903005][T17344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.911527][T17344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.926296][T17344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.023463][T17353] vhci_hcd: connection closed [ 766.024530][ T9] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 766.037812][ T12] vhci_hcd: stop threads [ 766.039522][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 766.050568][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 766.055315][ T12] vhci_hcd: release socket [ 766.058872][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 766.071993][ T9] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 766.089698][ T9] usb 5-1: USB disconnect, device number 119 [ 766.108160][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 766.115760][ T5830] vhci_hcd: vhci_device speed not set [ 766.118978][ T9] keyspan 5-1:0.133: device disconnected [ 766.133685][ T12] vhci_hcd: disconnect device [ 766.149864][ T4185] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.276030][ T4185] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.334515][ T25] usb 2-1: USB disconnect, device number 127 [ 766.403114][ T4185] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.536995][ T4185] bridge_slave_1: left allmulticast mode [ 766.549270][ T4185] bridge_slave_1: left promiscuous mode [ 766.555529][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.564970][ T4185] bridge_slave_0: left allmulticast mode [ 766.570834][ T4185] bridge_slave_0: left promiscuous mode [ 766.576877][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.907915][T17360] QAT: Invalid ioctl -1072131204 [ 767.246505][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 767.259844][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 767.268916][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 767.278718][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 767.287076][ T5158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 767.287370][ T4185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.308493][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.338997][ T4185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.352501][ T4185] bond0 (unregistering): Released all slaves [ 767.781894][T17369] chnl_net:caif_netlink_parms(): no params data found [ 768.008537][ T4185] hsr_slave_0: left promiscuous mode [ 768.015250][ T4185] hsr_slave_1: left promiscuous mode [ 768.027422][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.037366][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.047972][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.055931][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.078037][ T4185] veth1_macvtap: left promiscuous mode [ 768.083714][ T4185] veth0_macvtap: left promiscuous mode [ 768.089385][ T4185] veth1_vlan: left promiscuous mode [ 768.095406][ T4185] veth0_vlan: left promiscuous mode [ 768.124893][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 768.290370][ T5880] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 768.299399][ T5880] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 768.310568][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 768.323733][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 768.348941][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 768.364524][ T5880] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 768.374842][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 768.404706][ T5880] usb 2-1: Product: syz [ 768.412762][ T5880] usb 2-1: Manufacturer: syz [ 768.421807][T17380] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 768.431246][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 768.436663][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 768.459395][ T5880] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 768.479611][ T5880] cdc_wdm 2-1:1.0: Unknown control protocol [ 768.498586][ T8] usb 6-1: USB disconnect, device number 107 [ 768.805050][T17389] ufs: You didn't specify the type of your ufs filesystem [ 768.805050][T17389] [ 768.805050][T17389] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 768.805050][T17389] [ 768.805050][T17389] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 768.839414][T17389] ufs: ufs_fill_super(): bad magic number [ 769.179676][ C0] wdm_int_callback: 14196 callbacks suppressed [ 769.179701][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 769.192479][ C0] wdm_int_callback: 14196 callbacks suppressed [ 769.192498][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 769.195875][T17390] 9pnet_fd: Insufficient options for proto=fd [ 769.198971][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 769.217390][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 769.223937][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 769.230533][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 769.237374][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 769.240382][ T5830] usb 2-1: USB disconnect, device number 2 [ 769.243966][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 769.243988][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 769.651026][ T5833] Bluetooth: hci4: command tx timeout [ 769.937091][ T4185] team0 (unregistering): Port device team_slave_1 removed [ 770.005389][ T4185] team0 (unregistering): Port device team_slave_0 removed [ 770.580173][T17369] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.589635][T17369] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.598309][T17369] bridge_slave_0: entered allmulticast mode [ 770.609005][T17369] bridge_slave_0: entered promiscuous mode [ 770.617856][T17369] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.624915][T17369] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.633273][T17369] bridge_slave_1: entered allmulticast mode [ 770.637165][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 770.641760][T17369] bridge_slave_1: entered promiscuous mode [ 770.798272][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 770.805050][ T8] usb 2-1: config 1 has an invalid interface number: 204 but max is 0 [ 770.819508][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.837641][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 770.848844][ T8] usb 2-1: config 1 has no interface number 1 [ 770.861109][ T8] usb 2-1: config 1 interface 204 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.898309][T17369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.959692][T17369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.471032][ T8] usb 2-1: config 1 interface 204 has no altsetting 0 [ 771.477906][ T8] usb 2-1: New USB device found, idVendor=15c2, idProduct=0038, bcdDevice=9a.c6 [ 771.487212][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.561776][T17408] syz.7.2441: attempt to access beyond end of device [ 771.561776][T17408] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 771.706142][ T29] audit: type=1400 audit(3611585358.952:10292): avc: denied { write } for pid=17407 comm="syz.7.2441" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 771.755183][T17369] team0: Port device team_slave_0 added [ 771.824034][ T5833] Bluetooth: hci4: command tx timeout [ 771.900113][T17369] team0: Port device team_slave_1 added [ 771.929265][ T29] audit: type=1400 audit(3611585359.205:10293): avc: denied { lock } for pid=17398 comm="syz.1.2438" path="socket:[64756]" dev="sockfs" ino=64756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 771.974613][T17369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.993324][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.119275][T17369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.580405][ T29] audit: type=1400 audit(3611585359.785:10294): avc: denied { bind } for pid=17424 comm="syz.7.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 773.084394][T17369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.110237][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.227851][T17369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.251214][ T29] audit: type=1326 audit(3611585359.803:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327477e819 code=0x7ffc0000 [ 773.274851][ T29] audit: type=1326 audit(3611585359.803:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327477e819 code=0x7ffc0000 [ 773.300764][ T29] audit: type=1326 audit(3611585359.803:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f327477e819 code=0x7ffc0000 [ 773.324613][ T29] audit: type=1326 audit(3611585359.803:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327477e819 code=0x7ffc0000 [ 773.348356][ T29] audit: type=1326 audit(3611585359.803:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327477e819 code=0x7ffc0000 [ 773.372231][ T29] audit: type=1326 audit(3611585359.813:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f327477e819 code=0x7ffc0000 [ 773.396195][ T29] audit: type=1326 audit(3611585360.430:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327477e819 code=0x7ffc0000 [ 773.894443][T17369] hsr_slave_0: entered promiscuous mode [ 773.979928][T17369] hsr_slave_1: entered promiscuous mode [ 774.011777][T17369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.045890][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 774.055882][ T5833] Bluetooth: hci4: command tx timeout [ 774.062716][T17369] Cannot create hsr debugfs directory [ 774.596348][T17452] overlay: filesystem on ./bus not supported as upperdir [ 775.094805][T17369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 775.118360][T17369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 775.133515][T17369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 775.143168][T17369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 775.369566][T17369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.401755][T17369] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.425272][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.432412][ T7425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.497395][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.504514][T16982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.565106][ T5833] Bluetooth: hci4: command tx timeout [ 777.180794][T17369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.553323][ T8] usb 2-1: string descriptor 0 read error: -32 [ 777.572482][ T8] imon 2-1:1.204: inconsistent driver matching [ 777.599833][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.620914][ T8] imon 2-1:1.204: unable to register, err -22 [ 777.628893][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.636627][ T8] imon 2-1:1.204: probe with driver imon failed with error -22 [ 777.673398][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 777.705321][ T8] imon 2-1:1.0: unable to initialize intf0, err -19 [ 777.711915][ T8] imon:imon_probe: failed to initialize context! [ 777.720021][ T8] imon 2-1:1.0: unable to register, err -19 [ 777.794738][T17369] veth0_vlan: entered promiscuous mode [ 777.817412][T17369] veth1_vlan: entered promiscuous mode [ 777.831232][T17369] veth0_macvtap: entered promiscuous mode [ 777.848365][T17369] veth1_macvtap: entered promiscuous mode [ 777.855143][T15297] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 777.880791][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.895895][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.905686][T17495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.945310][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.966856][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.976774][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.987323][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.997322][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.007923][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.018023][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.028597][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.038946][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.049454][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.060566][T17369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.070614][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.081179][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.094534][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.105226][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.116309][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.127239][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.138469][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.150467][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.163346][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.173987][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.184737][T17369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.195318][T17369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.214590][T17369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.228710][T17369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.237491][T17369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.246810][T17369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.255596][T17369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.327729][T16982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.335867][T16982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.343431][T16982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.357285][T15297] usb 6-1: New USB device found, idVendor=12d1, idProduct=ca74, bcdDevice= c.d7 [ 778.366543][T15297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.374853][T15297] usb 6-1: Product: syz [ 778.378899][T16982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.379120][T15297] usb 6-1: Manufacturer: syz [ 778.397131][T15297] usb 6-1: SerialNumber: syz [ 778.413281][T15297] usb 6-1: config 0 descriptor?? [ 778.419496][T15297] huawei_cdc_ncm 6-1:0.0: CDC Union missing and no IAD found [ 778.428475][T15297] huawei_cdc_ncm 6-1:0.0: bind() failure [ 778.633301][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.644625][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.847000][T17498] overlayfs: conflicting lowerdir path [ 778.869157][ T5830] usb 6-1: USB disconnect, device number 108 [ 780.198381][T17528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.374582][T17532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.477246][T17533] wireguard0: entered promiscuous mode [ 780.482888][T17533] wireguard0: entered allmulticast mode [ 781.318311][ T5158] Bluetooth: hci5: command 0x0405 tx timeout [ 781.659349][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 781.759057][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.833091][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 781.841811][ T9] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 781.851742][ T5830] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 781.859210][ T9] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 781.868126][ T9] usb 5-1: config 0 has no interface number 0 [ 781.874511][ T9] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.886359][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 781.899777][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 781.912972][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 781.922896][ T9] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 781.931071][ T9] usb 5-1: Product: syz [ 781.937665][ T9] usb 5-1: config 0 descriptor?? [ 781.943319][T17548] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 782.045322][ T5830] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 782.056983][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 782.069519][ T5830] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 782.079082][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.087342][ T5830] usb 6-1: Product: syz [ 782.091574][ T5830] usb 6-1: Manufacturer: syz [ 782.096261][ T5830] usb 6-1: SerialNumber: syz [ 782.119863][ T5830] usb 6-1: config 0 descriptor?? [ 782.129006][ T5830] streamzap 6-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 782.348936][ T5830] usb 6-1: USB disconnect, device number 109 [ 782.606555][ T9] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input83 [ 782.723536][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.817310][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.906975][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.059727][ T12] bridge_slave_1: left allmulticast mode [ 783.065499][ T12] bridge_slave_1: left promiscuous mode [ 783.071703][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.085822][ T12] bridge_slave_0: left allmulticast mode [ 783.091458][ T12] bridge_slave_0: left promiscuous mode [ 783.098049][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.506249][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 784.506266][ T29] audit: type=1400 audit(4551109466.222:10304): avc: denied { append } for pid=17562 comm="syz.7.2484" name="usbmon5" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 784.679096][ T29] audit: type=1400 audit(4551109467.110:10305): avc: granted { setsecparam } for pid=17573 comm="syz.7.2487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 784.727354][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 784.740242][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 784.748881][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 784.759215][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 784.766786][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 784.781089][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.284924][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 785.294457][T15297] usb 5-1: USB disconnect, device number 120 [ 785.445541][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.485080][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.504468][ T12] bond0 (unregistering): Released all slaves [ 785.538943][T17578] bond0: (slave macvtap0): Error: Device is in use and cannot be enslaved [ 785.691887][T17596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 786.235007][T17604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.474575][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2494'. [ 787.134164][ T5158] Bluetooth: hci4: command tx timeout [ 787.316262][ T29] audit: type=1400 audit(4685327197.603:10306): avc: denied { read write } for pid=17622 comm="syz.1.2498" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 787.343959][ T12] hsr_slave_0: left promiscuous mode [ 787.366060][ T12] hsr_slave_1: left promiscuous mode [ 787.366815][ T29] audit: type=1400 audit(4685327197.622:10307): avc: denied { open } for pid=17622 comm="syz.1.2498" path="/574/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 787.428581][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.428854][ T29] audit: type=1326 audit(4685327197.706:10308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.5.2500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb798f7e819 code=0x0 [ 787.463466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.471485][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.479046][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.484277][T17629] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 787.513457][ T12] veth1_macvtap: left promiscuous mode [ 787.519203][ T12] veth0_macvtap: left promiscuous mode [ 787.524772][ T12] veth1_vlan: left promiscuous mode [ 787.530271][ T12] veth0_vlan: left promiscuous mode [ 788.161962][T17623] overlayfs: statfs failed on './file0' [ 788.448039][T15297] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 788.620499][T15297] usb 5-1: Using ep0 maxpacket: 32 [ 788.660736][T15297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.701054][T15297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.744802][T15297] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 788.788541][T15297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.807599][T15297] usb 5-1: config 0 descriptor?? [ 789.047974][ T29] audit: type=1400 audit(4685327199.212:10309): avc: denied { listen } for pid=17650 comm="syz.7.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 789.395509][ T5158] Bluetooth: hci4: command tx timeout [ 789.413684][T15297] greenasia 0003:0E8F:0012.002D: item fetching failed at offset 0/3 [ 789.427785][T15297] greenasia 0003:0E8F:0012.002D: parse failed [ 789.434167][T15297] greenasia 0003:0E8F:0012.002D: probe with driver greenasia failed with error -22 [ 789.777743][T17662] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 789.789502][T17662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2507'. [ 789.801037][T17662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.982385][ T12] team0 (unregistering): Port device team_slave_1 removed [ 790.042128][ T12] team0 (unregistering): Port device team_slave_0 removed [ 790.493130][T17665] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 790.501616][T17665] NCSI netlink: No device for ifindex 0 [ 790.653443][ T5883] usb 5-1: USB disconnect, device number 121 [ 790.763064][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2502'. [ 790.883796][T17570] chnl_net:caif_netlink_parms(): no params data found [ 791.051016][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.058219][ T5883] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 791.106132][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.117097][T17570] bridge_slave_0: entered allmulticast mode [ 791.136569][T17570] bridge_slave_0: entered promiscuous mode [ 791.163255][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.170604][T17570] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.182424][T17570] bridge_slave_1: entered allmulticast mode [ 791.224151][T17570] bridge_slave_1: entered promiscuous mode [ 791.248681][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 791.256698][ T5883] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.286421][ T5883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 791.298934][ T5883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 791.311442][ T5883] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.327898][ T5883] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 791.337861][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.367068][T17570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.399231][T17570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.482252][T17570] team0: Port device team_slave_0 added [ 791.508803][T17570] team0: Port device team_slave_1 added [ 791.557071][T17570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.564386][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.580016][ T5158] Bluetooth: hci4: command tx timeout [ 791.606992][ T5883] usb 5-1: GET_CAPABILITIES returned 0 [ 791.615942][ T5883] usbtmc 5-1:16.0: can't read capabilities [ 791.622128][T17570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.654334][T17570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.662050][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.691367][T17570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.811039][T17570] hsr_slave_0: entered promiscuous mode [ 791.962289][T17570] hsr_slave_1: entered promiscuous mode [ 791.972859][T17570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.980888][T17570] Cannot create hsr debugfs directory [ 792.204594][ T5883] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 792.777582][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 792.784651][ T5883] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 792.793845][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.814166][ T5883] usb 6-1: config 0 descriptor?? [ 792.823215][ T5883] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 792.982342][ T29] audit: type=1400 audit(4819544930.901:10310): avc: denied { mounton } for pid=17680 comm="syz.7.2512" path="/169/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 793.008254][T17570] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 793.033735][T17570] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 793.054393][T17570] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 793.072467][T17570] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 793.161071][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.388125][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.408456][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.415541][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.430885][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.437984][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.664118][T17570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 793.676205][T17570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.806369][ T5158] Bluetooth: hci4: command tx timeout [ 794.012546][T17570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.021101][ T1197] usb 5-1: USB disconnect, device number 122 [ 794.147042][T17677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.159671][T17677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.787648][ T5883] gspca_nw80x: reg_w err -110 [ 794.793902][ T5883] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 795.357974][ T4185] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.842474][ T9] usb 6-1: USB disconnect, device number 110 [ 795.865476][ T29] audit: type=1400 audit(4819544933.155:10311): avc: denied { ioctl } for pid=17706 comm="syz.7.2517" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 796.047083][T17720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.082042][T17720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.100729][T17570] veth0_vlan: entered promiscuous mode [ 796.111556][T17570] veth1_vlan: entered promiscuous mode [ 796.151998][T17570] veth0_macvtap: entered promiscuous mode [ 796.169191][T17570] veth1_macvtap: entered promiscuous mode [ 796.177066][ T5883] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 796.202241][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.212771][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.222998][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.233532][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.243427][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.255155][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.265083][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.276257][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.291145][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.303243][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.313763][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.324727][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.336206][T17570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.349311][ T5883] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 796.359360][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.371403][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.374221][ T5883] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 796.382002][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.395537][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.402084][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.420009][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.431997][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.447923][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.459627][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.470676][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.490357][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.854345][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.871316][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.888722][ T29] audit: type=1326 audit(4819544934.549:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 796.890474][T17570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.913047][ T29] audit: type=1326 audit(4819544934.577:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 796.922083][T17570] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.952373][T17570] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.961426][T17570] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.970292][T17570] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.036071][ T29] audit: type=1326 audit(4819544934.671:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 797.036740][T17728] netlink: 'syz.7.2522': attribute type 10 has an invalid length. [ 797.059887][ T29] audit: type=1326 audit(4819544934.671:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 797.059927][ T29] audit: type=1326 audit(4819544934.671:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 797.059955][ T29] audit: type=1326 audit(4819544934.671:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 797.060005][ T29] audit: type=1326 audit(4819544934.671:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 797.060033][ T29] audit: type=1326 audit(4819544934.671:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834d7e819 code=0x7ffc0000 [ 797.367731][T17728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.383907][T17728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.394673][T17728] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 797.448712][ T5883] usb 5-1: string descriptor 0 read error: -71 [ 797.483981][ T5883] hub 5-1:32.0: USB hub found [ 797.494977][ T5883] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 797.535616][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.548240][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.613099][ T5883] usb 5-1: USB disconnect, device number 123 [ 797.724471][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.734288][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.876759][ T1197] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 797.899599][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.049299][ T1197] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.063521][ T1197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 798.103751][ T1197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 798.115261][ T1197] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 798.128594][ T1197] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.697873][ T1197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.730625][ T1197] usb 6-1: config 0 descriptor?? [ 798.744890][T17736] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 799.097740][T17749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.109637][T17749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.293871][ T1197] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 799.330842][ T5883] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 799.525352][ T1197] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 799.557302][ T5883] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 799.573379][ T5883] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 799.588128][ T1197] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 799.640693][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.693669][ T1197] usb 6-1: USB disconnect, device number 111 [ 799.701018][ T5883] usb 5-1: config 0 has no interface number 0 [ 799.716126][ T5883] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 799.755543][ T5883] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 799.789639][ T5883] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 799.829872][ T5883] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 799.839510][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.893583][ T5883] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 799.927196][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.947052][ T5883] usb 5-1: config 0 descriptor?? [ 799.953142][T17750] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 799.989844][ T5883] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 800.176027][ T8] usb 5-1: USB disconnect, device number 124 [ 800.182132][T16951] usb 5-1: Failed to submit usb control message: -71 [ 800.193094][T16951] usb 5-1: unable to send the bmi data to the device: -71 [ 800.200811][T16951] usb 5-1: unable to get target info from device [ 800.207575][T16951] usb 5-1: could not get target info (-71) [ 800.213475][T16951] usb 5-1: could not probe fw (-71) [ 800.311936][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.396400][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.485375][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.597617][ T12] bridge_slave_1: left allmulticast mode [ 800.603595][ T12] bridge_slave_1: left promiscuous mode [ 800.609850][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.619914][ T12] bridge_slave_0: left allmulticast mode [ 800.626448][ T12] bridge_slave_0: left promiscuous mode [ 800.632129][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.046312][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.056673][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.068127][ T12] bond0 (unregistering): Released all slaves [ 801.404440][ T12] hsr_slave_0: left promiscuous mode [ 801.410486][ T12] hsr_slave_1: left promiscuous mode [ 801.419789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.427895][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.435707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.447110][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.464750][ T12] veth1_macvtap: left promiscuous mode [ 801.470333][ T12] veth0_macvtap: left promiscuous mode [ 801.476014][ T12] veth1_vlan: left promiscuous mode [ 801.481470][ T12] veth0_vlan: left promiscuous mode [ 801.902421][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.949973][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.966886][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.974990][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.989739][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 802.030679][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.671903][T15297] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 802.868710][T15297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.880966][T15297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.932987][T15297] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 802.942769][T15297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.019472][T15297] usb 6-1: config 0 descriptor?? [ 803.196012][ T12] team0 (unregistering): Port device team_slave_1 removed [ 803.302388][ T12] team0 (unregistering): Port device team_slave_0 removed [ 803.632925][T15297] usbhid 6-1:0.0: can't add hid device: -71 [ 803.640315][T15297] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 803.656643][T15297] usb 6-1: USB disconnect, device number 112 [ 803.992023][T17781] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 804.023802][T17784] veth1_macvtap: left promiscuous mode [ 804.440948][T17768] chnl_net:caif_netlink_parms(): no params data found [ 804.526323][ T5883] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 804.555964][T17768] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.563593][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.574177][T17768] bridge_slave_0: entered allmulticast mode [ 804.580942][ T5833] Bluetooth: hci4: command tx timeout [ 804.596983][T17768] bridge_slave_0: entered promiscuous mode [ 804.613645][T17768] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.621393][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.631785][T17768] bridge_slave_1: entered allmulticast mode [ 804.643448][T17768] bridge_slave_1: entered promiscuous mode [ 804.695246][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.719893][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.721365][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 804.755709][ T5883] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 804.769127][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.780392][ T5883] usb 5-1: Product: syz [ 804.788569][ T5883] usb 5-1: Manufacturer: syz [ 804.793356][ T5883] usb 5-1: SerialNumber: syz [ 804.799541][T17768] team0: Port device team_slave_0 added [ 804.812057][ T5883] r8152-cfgselector 5-1: Unknown version 0x0000 [ 804.815334][T17768] team0: Port device team_slave_1 added [ 804.824098][ T5883] r8152-cfgselector 5-1: config 0 descriptor?? [ 804.845940][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.853122][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.880009][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.893760][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.902070][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.928931][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.011702][T17768] hsr_slave_0: entered promiscuous mode [ 805.017940][T17768] hsr_slave_1: entered promiscuous mode [ 805.027305][T17768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 805.039852][T17768] Cannot create hsr debugfs directory [ 805.292367][T17799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2537'. [ 805.306401][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.326952][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.338186][ T5880] r8152-cfgselector 5-1: USB disconnect, device number 125 [ 805.360314][T15297] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 805.509317][T17768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 805.522007][T15297] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 805.530954][T17768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 805.538231][T15297] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.549851][T15297] usb 6-1: config 0 has no interface number 0 [ 805.551139][T17768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 805.567528][T15297] usb 6-1: config 0 interface 52 has no altsetting 0 [ 805.588492][T17768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 805.589699][T15297] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 805.608902][T15297] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 805.618143][T15297] usb 6-1: Product: syz [ 805.622531][T15297] usb 6-1: Manufacturer: syz [ 805.627119][T15297] usb 6-1: SerialNumber: syz [ 805.639752][T15297] usb 6-1: config 0 descriptor?? [ 805.731743][T17768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.783017][T17768] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.812380][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.819457][ T4185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.842221][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.849372][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.049317][T17823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.086545][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 806.086560][ T29] audit: type=1400 audit(4819544943.155:10337): avc: denied { read append } for pid=17822 comm="syz.4.2542" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 806.113055][T17823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.146340][T17823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.162623][ T29] audit: type=1400 audit(4819544943.164:10338): avc: denied { map } for pid=17822 comm="syz.4.2542" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 806.189360][T17823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.238625][T15297] usb 6-1: Can not set alternate setting to 1, error: -71 [ 806.267461][T15297] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 806.327568][T15297] usb 6-1: USB disconnect, device number 113 [ 806.387488][T17768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.512655][T17768] veth0_vlan: entered promiscuous mode [ 806.523456][T17768] veth1_vlan: entered promiscuous mode [ 806.552796][T17768] veth0_macvtap: entered promiscuous mode [ 806.563799][T17768] veth1_macvtap: entered promiscuous mode [ 806.578550][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.589297][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.600655][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.611156][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.621046][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.631580][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.641787][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.652309][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.662313][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.672983][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.684239][T17768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.701731][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.712722][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.723296][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.735204][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.745110][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.756326][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.766588][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.777409][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.792711][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.804640][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.814849][T17768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.825939][T17768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.836701][T17768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.845780][ T5833] Bluetooth: hci4: command tx timeout [ 806.855128][T17768] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.866538][T17768] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.875743][T17768] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.884600][T17768] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.338863][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.346870][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.494495][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.502416][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.766827][T17853] QAT: failed to copy from user. [ 808.089447][T17855] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2548'. [ 808.909658][ T1197] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 809.274813][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'. [ 809.317154][ T1197] usb 6-1: Using ep0 maxpacket: 16 [ 809.323790][ T1197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.348096][ T1197] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 809.357168][ T1197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.366479][ T29] audit: type=1400 audit(4819544946.223:10339): avc: denied { name_bind 0x1000000 } for pid=17878 comm="syz.4.2554" path="socket:[69972]" dev="sockfs" ino=69972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 809.416102][ T1197] usb 6-1: Product: syz [ 809.420375][ T1197] usb 6-1: Manufacturer: syz [ 809.425428][ T29] audit: type=1400 audit(4819544946.270:10340): avc: denied { listen } for pid=17881 comm="syz.1.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 809.446105][ T1197] usb 6-1: SerialNumber: syz [ 809.452417][ T1197] usb 6-1: config 0 descriptor?? [ 809.475686][ T1197] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 809.502183][ T1197] ftdi_sio ttyUSB0: unknown device type: 0xc5ff [ 809.557233][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2556'. [ 809.657944][T15297] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 809.820603][T15297] usb 5-1: config 28 has an invalid descriptor of length 98, skipping remainder of the config [ 809.833412][T15297] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 809.843281][T15297] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=3c.3b [ 809.854251][T15297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.918017][T17894] misc userio: Invalid payload size [ 810.350801][ T5880] usb 5-1: USB disconnect, device number 126 [ 810.437323][T17896] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2558'. [ 811.581340][ T5880] usb 6-1: USB disconnect, device number 114 [ 811.597361][ T5880] ftdi_sio 6-1:0.0: device disconnected [ 811.703934][T17912] netlink: 'syz.5.2563': attribute type 21 has an invalid length. [ 811.714667][T17912] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2563'. [ 812.849610][T16954] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.152308][T17921] tmpfs: Bad value for 'mpol' [ 813.272484][T16954] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.360847][T16954] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.460156][T16954] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.720829][T16954] bridge_slave_1: left allmulticast mode [ 813.729926][T16954] bridge_slave_1: left promiscuous mode [ 813.758206][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.779506][T16954] bridge_slave_0: left allmulticast mode [ 813.785344][T16954] bridge_slave_0: left promiscuous mode [ 813.792144][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.222588][T16954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.235407][T16954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.246113][T16954] bond0 (unregistering): Released all slaves [ 814.607065][T16954] hsr_slave_0: left promiscuous mode [ 814.623642][T16954] hsr_slave_1: left promiscuous mode [ 814.633553][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.646698][T16954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.654578][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.662263][T16954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.684733][T16954] veth1_macvtap: left promiscuous mode [ 814.690336][T16954] veth0_macvtap: left promiscuous mode [ 814.696444][T16954] veth1_vlan: left promiscuous mode [ 814.701850][T16954] veth0_vlan: left promiscuous mode [ 814.915983][ T29] audit: type=1400 audit(4819544951.414:10341): avc: denied { watch watch_reads } for pid=17926 comm="syz.5.2566" path="pipe:[70155]" dev="pipefs" ino=70155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 814.961393][T17930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.980813][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2567'. [ 815.571676][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 815.643233][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 815.717260][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 815.728892][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 815.753331][ T5158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 815.766572][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 816.155448][T16954] team0 (unregistering): Port device team_slave_1 removed [ 816.223948][T16954] team0 (unregistering): Port device team_slave_0 removed [ 816.622732][T17961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.637570][T17961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.044000][ T29] audit: type=1400 audit(4819544953.407:10342): avc: denied { listen } for pid=17966 comm="syz.4.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 818.008401][T17976] FAULT_INJECTION: forcing a failure. [ 818.008401][T17976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.021566][T17976] CPU: 1 UID: 0 PID: 17976 Comm: syz.7.2577 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 818.031979][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 818.042029][T17976] Call Trace: [ 818.045302][T17976] [ 818.048233][T17976] dump_stack_lvl+0x16c/0x1f0 [ 818.053095][T17976] should_fail_ex+0x497/0x5b0 [ 818.057778][T17976] _copy_from_user+0x2e/0xd0 [ 818.062371][T17976] __do_sys_clock_adjtime+0x97/0x290 [ 818.067657][T17976] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 818.073564][T17976] ? __pfx_ksys_write+0x10/0x10 [ 818.078421][T17976] do_syscall_64+0xcd/0x250 [ 818.082923][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.088823][T17976] RIP: 0033:0x7f327477e819 [ 818.093234][T17976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.112926][T17976] RSP: 002b:00007f3275557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 818.121336][T17976] RAX: ffffffffffffffda RBX: 00007f3274936080 RCX: 00007f327477e819 [ 818.129313][T17976] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000000 [ 818.137279][T17976] RBP: 00007f3275557090 R08: 0000000000000000 R09: 0000000000000000 [ 818.145242][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.153209][T17976] R13: 0000000000000001 R14: 00007f3274936080 R15: 00007ffd03e88d58 [ 818.161191][T17976] [ 818.164885][ T5833] Bluetooth: hci4: command tx timeout [ 820.274178][ T5833] Bluetooth: hci4: command tx timeout [ 822.465187][ T5158] Bluetooth: hci4: command tx timeout [ 824.710236][ T5158] Bluetooth: hci4: command tx timeout [ 829.142410][ T7425] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 831.998621][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 832.010004][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 832.019934][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 832.029171][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 832.038029][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 832.045420][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 833.097685][ T25] usb 2-1: USB disconnect, device number 3 [ 833.130714][T17992] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 833.140379][T17992] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 833.148960][T17992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 833.157932][T17992] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 833.166413][T17992] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 833.174509][T17992] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 834.150131][T17988] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 834.163139][T17988] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 929.371170][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 929.378140][ C1] rcu: 0-...!: (0 ticks this GP) idle=5454/1/0x4000000000000000 softirq=108426/108426 fqs=0 [ 929.389815][ C1] rcu: (detected by 1, t=10503 jiffies, g=85521, q=1770 ncpus=2) [ 929.397622][ C1] Sending NMI from CPU 1 to CPUs 0: [ 929.397648][ C0] NMI backtrace for cpu 0 [ 929.397656][ C0] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 929.397673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 929.397681][ C0] RIP: 0010:kasan_check_range+0x111/0x1a0 [ 929.397706][ C0] Code: 44 89 c2 e8 e1 ea ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 <74> f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0 [ 929.397723][ C0] RSP: 0018:ffffc90000007cd0 EFLAGS: 00000046 [ 929.397735][ C0] RAX: fffffbfff20beb82 RBX: fffffbfff20beb83 RCX: ffffffff816a768c [ 929.397744][ C0] RDX: fffffbfff20beb83 RSI: 0000000000000008 RDI: ffffffff905f5c10 [ 929.397753][ C0] RBP: fffffbfff20beb82 R08: 0000000000000000 R09: fffffbfff20beb82 [ 929.397762][ C0] R10: ffffffff905f5c17 R11: 0000000000000007 R12: 0000000000000000 [ 929.397770][ C0] R13: 000000000003d90c R14: 0000000000000000 R15: 0000000000000000 [ 929.397779][ C0] FS: 000055555df8f500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 929.397793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 929.397802][ C0] CR2: 00007f3275557d58 CR3: 0000000061172000 CR4: 00000000003526f0 [ 929.397811][ C0] Call Trace: [ 929.397816][ C0] [ 929.397822][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 929.397840][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 929.397854][ C0] ? nmi_handle+0x1a7/0x5c0 [ 929.397869][ C0] ? kasan_check_range+0x111/0x1a0 [ 929.397887][ C0] ? default_do_nmi+0x6a/0x160 [ 929.397902][ C0] ? exc_nmi+0x170/0x1e0 [ 929.397916][ C0] ? end_repeat_nmi+0xf/0x53 [ 929.397931][ C0] ? trace_lock_acquire+0x3c/0x1e0 [ 929.397950][ C0] ? kasan_check_range+0x111/0x1a0 [ 929.397968][ C0] ? kasan_check_range+0x111/0x1a0 [ 929.397985][ C0] ? kasan_check_range+0x111/0x1a0 [ 929.398002][ C0] [ 929.398007][ C0] [ 929.398012][ C0] trace_lock_acquire+0x3c/0x1e0 [ 929.398029][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 929.398046][ C0] ? advance_sched+0x679/0xc60 [ 929.398063][ C0] lock_acquire+0x2f/0xb0 [ 929.398082][ C0] ? advance_sched+0x679/0xc60 [ 929.398098][ C0] advance_sched+0x67f/0xc60 [ 929.398113][ C0] ? advance_sched+0x679/0xc60 [ 929.398130][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 929.398147][ C0] ? __pfx_advance_sched+0x10/0x10 [ 929.398162][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 929.398182][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 929.398198][ C0] ? read_tsc+0x9/0x20 [ 929.398217][ C0] hrtimer_interrupt+0x392/0x8e0 [ 929.398238][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 929.398254][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 929.398272][ C0] [ 929.398276][ C0] [ 929.398281][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 929.398294][ C0] RIP: 0010:lock_release+0x3e5/0x6f0 [ 929.398308][ C0] Code: 7e 83 f8 01 0f 85 fe 01 00 00 9c 58 f6 c4 02 0f 85 e9 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 929.398320][ C0] RSP: 0018:ffffc90003df7610 EFLAGS: 00000206 [ 929.398330][ C0] RAX: dffffc0000000000 RBX: 1ffff920007beec4 RCX: ffffc90003df7660 [ 929.398339][ C0] RDX: 1ffff11006126a6a RSI: ffffffff8b6ce1e0 RDI: ffffffff8bd0e980 [ 929.398348][ C0] RBP: c0a8b0a1d1e41340 R08: 0000000000000000 R09: fffffbfff20beb82 [ 929.398357][ C0] R10: ffffffff905f5c17 R11: 0000000000000007 R12: 0000000000000007 [ 929.398365][ C0] R13: 0000000000000008 R14: ffff888030935358 R15: ffff888030934880 [ 929.398378][ C0] ? page_table_check_set+0x228/0x9c0 [ 929.398394][ C0] ? __pfx_lock_release+0x10/0x10 [ 929.398407][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 929.398425][ C0] ? lock_acquire+0x2f/0xb0 [ 929.398438][ C0] ? page_table_check_set+0x114/0x9c0 [ 929.398454][ C0] page_table_check_set+0x22d/0x9c0 [ 929.398470][ C0] __page_table_check_ptes_set+0x2d0/0x3e0 [ 929.398486][ C0] ? vm_normal_page+0x13c/0x2b0 [ 929.398498][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 929.398514][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 929.398529][ C0] ? copy_page_range+0xd0e/0x57d0 [ 929.398545][ C0] copy_page_range+0x2088/0x57d0 [ 929.398567][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 929.398580][ C0] ? find_held_lock+0x2d/0x110 [ 929.398599][ C0] ? __pfx_lock_release+0x10/0x10 [ 929.398612][ C0] ? lock_acquire+0x2f/0xb0 [ 929.398625][ C0] ? copy_process+0x7c76/0x8cc0 [ 929.398643][ C0] ? down_write+0x14e/0x200 [ 929.398657][ C0] ? up_write+0x1b2/0x520 [ 929.398672][ C0] copy_process+0x7d29/0x8cc0 [ 929.398688][ C0] ? hlock_class+0x4e/0x130 [ 929.398711][ C0] ? __pfx_copy_process+0x10/0x10 [ 929.398735][ C0] kernel_clone+0xfd/0x960 [ 929.398751][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 929.398770][ C0] ? find_held_lock+0x59/0x110 [ 929.398787][ C0] ? find_held_lock+0x2d/0x110 [ 929.398804][ C0] __do_sys_clone+0xba/0x100 [ 929.398821][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 929.398841][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 929.398856][ C0] do_syscall_64+0xcd/0x250 [ 929.398869][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.398888][ C0] RIP: 0033:0x7fa834d75093 [ 929.398899][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 929.398910][ C0] RSP: 002b:00007fffccc56058 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 929.398922][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa834d75093 [ 929.398930][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 929.398939][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 929.398947][ C0] R10: 000055555df8f7d0 R11: 0000000000000246 R12: 0000000000000000 [ 929.398955][ C0] R13: 00000000000c37ff R14: 00000000000c37c3 R15: 00007fffccc561e0 [ 929.398968][ C0] [ 929.399643][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g85521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 929.988823][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=65943 [ 929.996704][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g85521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 930.008063][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 930.018025][ C1] rcu: RCU grace-period kthread stack dump: [ 930.023900][ C1] task:rcu_preempt state:I stack:26928 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 930.034084][ C1] Call Trace: [ 930.037365][ C1] [ 930.040296][ C1] __schedule+0xe58/0x5ad0 [ 930.044720][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 930.049928][ C1] ? __pfx___schedule+0x10/0x10 [ 930.054779][ C1] ? schedule+0x298/0x350 [ 930.059108][ C1] ? __pfx_lock_release+0x10/0x10 [ 930.064132][ C1] ? lock_acquire+0x2f/0xb0 [ 930.068629][ C1] ? schedule+0x1fd/0x350 [ 930.072959][ C1] schedule+0xe7/0x350 [ 930.077032][ C1] schedule_timeout+0x124/0x280 [ 930.081884][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 930.087272][ C1] ? __pfx_process_timeout+0x10/0x10 [ 930.092583][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 930.098399][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 930.103863][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 930.108634][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 930.113923][ C1] ? rcu_gp_init+0xc82/0x1630 [ 930.118607][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 930.123813][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 930.129622][ C1] rcu_gp_kthread+0x271/0x380 [ 930.134298][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 930.139498][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 930.144701][ C1] ? __kthread_parkme+0x148/0x220 [ 930.149729][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 930.154924][ C1] kthread+0x2c1/0x3a0 [ 930.158993][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 930.164191][ C1] ? __pfx_kthread+0x10/0x10 [ 930.168783][ C1] ret_from_fork+0x45/0x80 [ 930.173194][ C1] ? __pfx_kthread+0x10/0x10 [ 930.177783][ C1] ret_from_fork_asm+0x1a/0x30 [ 930.182560][ C1]