last executing test programs: 7.549858385s ago: executing program 0 (id=1): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 7.547716615s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x3, "9e5b4c"}, 0x0}) 7.35892642s ago: executing program 0 (id=5): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) read(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x13, r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 6.756648635s ago: executing program 0 (id=6): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.066647672s ago: executing program 0 (id=8): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000075c0)={0x44, &(0x7f0000000000)={0x60, 0x8, 0x3, "b27078"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.444198681s ago: executing program 3 (id=9): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0xb6, 0x6, "39e4983ed3a871bf8e4ad75a6281838754f3306783aede73ab727b9a368648b07679f371ed7cb67f723304d6159e40d076930a5435118902ed95bba8dba2198120a34bcc5b4b34249f7eb4894af4b398add796411fbae8fac88e02821f9359a8921a22980af383d05a813b1b62c33f747a287f7da90c9073cb71dbf51d30f1b69e7e94a302b4ed05775737b18d7eda528bb23ba7a1a5acd8f225b4bac2c169ef9fb534025818d33ab930011be2bf65f83fff"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.176989318s ago: executing program 3 (id=10): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x13, r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 3.728553959s ago: executing program 1 (id=11): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.66998546s ago: executing program 1 (id=12): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000fa0000000000000000000004000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.558671293s ago: executing program 1 (id=13): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) read(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x13, r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 3.342961198s ago: executing program 2 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000500)="5215bc9b122c720df46d2b5dd0207579efed4ae5e975d1600302bf46b943919c447eaf58b60cee2788bbe49f9872dc62a1cc3bf613600d063bcf80b064ea488ef3190305ca78c62d3a686c1d6be7f4237ed42c45"}) 3.25748989s ago: executing program 2 (id=16): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3.239125411s ago: executing program 3 (id=17): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x3, "9e5b4c"}, 0x0}) 3.006585437s ago: executing program 0 (id=18): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0xb6, 0x6, "39e4983ed3a871bf8e4ad75a6281838754f3306783aede73ab727b9a368648b07679f371ed7cb67f723304d6159e40d076930a5435118902ed95bba8dba2198120a34bcc5b4b34249f7eb4894af4b398add796411fbae8fac88e02821f9359a8921a22980af383d05a813b1b62c33f747a287f7da90c9073cb71dbf51d30f1b69e7e94a302b4ed05775737b18d7eda528bb23ba7a1a5acd8f225b4bac2c169ef9fb534025818d33ab930011be2bf65f83fff"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.953924168s ago: executing program 0 (id=19): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a24010700", @ANYRESDEC], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) close(r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r4, 0x0, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000400)=0x84) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r6, 0x1, 0x5}, 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 2.704288554s ago: executing program 1 (id=20): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 2.576570017s ago: executing program 1 (id=21): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000fa0000000000000000000004000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.576160567s ago: executing program 2 (id=22): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100)={0x6, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 2.44609712s ago: executing program 1 (id=23): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) 2.150552517s ago: executing program 2 (id=24): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000500)="5215bc9b122c720df46d2b5dd0207579efed4ae5e975d1600302bf46b943919c447eaf58b60cee2788bbe49f9872dc62a1cc3bf613600d063bcf80b064ea488ef3190305ca78c62d3a686c1d6be7f4237ed42c45"}) 2.124197779s ago: executing program 2 (id=25): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x13, r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 1.23177909s ago: executing program 2 (id=26): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000075c0)={0x44, &(0x7f0000000000)={0x60, 0x8, 0x3, "b27078"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 141.729456ms ago: executing program 3 (id=27): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0xb6, 0x6, "39e4983ed3a871bf8e4ad75a6281838754f3306783aede73ab727b9a368648b07679f371ed7cb67f723304d6159e40d076930a5435118902ed95bba8dba2198120a34bcc5b4b34249f7eb4894af4b398add796411fbae8fac88e02821f9359a8921a22980af383d05a813b1b62c33f747a287f7da90c9073cb71dbf51d30f1b69e7e94a302b4ed05775737b18d7eda528bb23ba7a1a5acd8f225b4bac2c169ef9fb534025818d33ab930011be2bf65f83fff"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=28): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) read(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x13, r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 80.595481][ T5761] cgroup: Unknown subsys name 'net' [ 80.745403][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.409308][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.670173][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.678291][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.678312][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.683775][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.686976][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.695528][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.701695][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.711252][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.729060][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.731388][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.737738][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.744285][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.757333][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.766293][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.774547][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.774895][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.790444][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.797975][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.806726][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.814271][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.822307][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.829626][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.836172][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.844210][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.347728][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 85.429942][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.467277][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.538615][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.590393][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.598499][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.605912][ T5774] bridge_slave_0: entered allmulticast mode [ 85.613010][ T5774] bridge_slave_0: entered promiscuous mode [ 85.655014][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.662508][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.669901][ T5774] bridge_slave_1: entered allmulticast mode [ 85.678071][ T5774] bridge_slave_1: entered promiscuous mode [ 85.752554][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.759853][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.767159][ T5776] bridge_slave_0: entered allmulticast mode [ 85.774539][ T5776] bridge_slave_0: entered promiscuous mode [ 85.783273][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.792015][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.799402][ T5775] bridge_slave_0: entered allmulticast mode [ 85.807220][ T5775] bridge_slave_0: entered promiscuous mode [ 85.825600][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.832953][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.840354][ T5775] bridge_slave_1: entered allmulticast mode [ 85.847870][ T5775] bridge_slave_1: entered promiscuous mode [ 85.861644][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.869794][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.877939][ T5776] bridge_slave_1: entered allmulticast mode [ 85.885470][ T5776] bridge_slave_1: entered promiscuous mode [ 85.896902][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.958102][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.993694][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.004051][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.011359][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.019169][ T5773] bridge_slave_0: entered allmulticast mode [ 86.026781][ T5773] bridge_slave_0: entered promiscuous mode [ 86.049414][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.060911][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.070599][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.078255][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.085509][ T5773] bridge_slave_1: entered allmulticast mode [ 86.092775][ T5773] bridge_slave_1: entered promiscuous mode [ 86.137660][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.161615][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.173339][ T5774] team0: Port device team_slave_0 added [ 86.203427][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.214958][ T5774] team0: Port device team_slave_1 added [ 86.235475][ T5775] team0: Port device team_slave_0 added [ 86.244934][ T5775] team0: Port device team_slave_1 added [ 86.294362][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.301506][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.327982][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.344949][ T5776] team0: Port device team_slave_0 added [ 86.378563][ T5773] team0: Port device team_slave_0 added [ 86.395127][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.402453][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.428550][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.447962][ T5776] team0: Port device team_slave_1 added [ 86.456270][ T5773] team0: Port device team_slave_1 added [ 86.462873][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.469944][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.496385][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.509646][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.516694][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.542716][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.632848][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.640250][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.666558][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.686122][ T5774] hsr_slave_0: entered promiscuous mode [ 86.693026][ T5774] hsr_slave_1: entered promiscuous mode [ 86.712324][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.722845][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.752172][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.765418][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.773261][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.799394][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.811091][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.818681][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.844946][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.919750][ T5775] hsr_slave_0: entered promiscuous mode [ 86.929895][ T51] Bluetooth: hci2: command tx timeout [ 86.929915][ T5784] Bluetooth: hci0: command tx timeout [ 86.941660][ T5787] Bluetooth: hci3: command tx timeout [ 86.948556][ T5775] hsr_slave_1: entered promiscuous mode [ 86.954946][ T5085] Bluetooth: hci1: command tx timeout [ 86.961139][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.969168][ T5775] Cannot create hsr debugfs directory [ 87.215118][ T5776] hsr_slave_0: entered promiscuous mode [ 87.222894][ T5776] hsr_slave_1: entered promiscuous mode [ 87.233408][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.242972][ T5776] Cannot create hsr debugfs directory [ 87.275429][ T5773] hsr_slave_0: entered promiscuous mode [ 87.283514][ T5773] hsr_slave_1: entered promiscuous mode [ 87.293855][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.302938][ T5773] Cannot create hsr debugfs directory [ 87.724989][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.766635][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.777409][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.792178][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.893185][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.916637][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.928114][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.942848][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.021201][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.040500][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.053740][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.064851][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.115652][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.174959][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.209484][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.223645][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.234237][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.250272][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.257705][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.277650][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.284816][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.294549][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.434676][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.512464][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.541070][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.556431][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.563620][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.605090][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.612313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.657810][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.698442][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.705673][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.751535][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.772784][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.780008][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.865179][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.914366][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.921659][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.000891][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.008086][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.016771][ T5085] Bluetooth: hci1: command tx timeout [ 89.022231][ T5085] Bluetooth: hci3: command tx timeout [ 89.027764][ T5085] Bluetooth: hci0: command tx timeout [ 89.029199][ T5787] Bluetooth: hci2: command tx timeout [ 89.159582][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.344452][ T5774] veth0_vlan: entered promiscuous mode [ 89.409215][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.453254][ T5774] veth1_vlan: entered promiscuous mode [ 89.544401][ T5775] veth0_vlan: entered promiscuous mode [ 89.598066][ T5775] veth1_vlan: entered promiscuous mode [ 89.623628][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.645096][ T5774] veth0_macvtap: entered promiscuous mode [ 89.673389][ T5775] veth0_macvtap: entered promiscuous mode [ 89.699696][ T5774] veth1_macvtap: entered promiscuous mode [ 89.730054][ T5775] veth1_macvtap: entered promiscuous mode [ 89.753544][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.775658][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.803443][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.815863][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.829917][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.841633][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.861061][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.884201][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.895553][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.909388][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.952650][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.963265][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.982280][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.000214][ T5773] veth0_vlan: entered promiscuous mode [ 90.045641][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.055083][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.064247][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.073726][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099515][ T5773] veth1_vlan: entered promiscuous mode [ 90.159327][ T5776] veth0_vlan: entered promiscuous mode [ 90.240119][ T5776] veth1_vlan: entered promiscuous mode [ 90.247328][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.255356][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.302500][ T5773] veth0_macvtap: entered promiscuous mode [ 90.344223][ T5773] veth1_macvtap: entered promiscuous mode [ 90.365236][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.383867][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.390587][ T5776] veth0_macvtap: entered promiscuous mode [ 90.426769][ T5776] veth1_macvtap: entered promiscuous mode [ 90.442638][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.466131][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.494551][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.502688][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.502740][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.502752][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.502766][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.510382][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.556433][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.587725][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.600443][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.616530][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.627168][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.639723][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.678920][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.707670][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.716915][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.725676][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.746444][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.759306][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.769718][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.780664][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.790907][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.806803][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.819093][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.849212][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.894114][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.926236][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.951189][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.989791][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.004598][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.019382][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.072862][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.086760][ T5787] Bluetooth: hci0: command tx timeout [ 91.088068][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.092205][ T5787] Bluetooth: hci3: command tx timeout [ 91.104261][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.107119][ T5784] Bluetooth: hci1: command tx timeout [ 91.115619][ T5085] Bluetooth: hci2: command tx timeout [ 91.128130][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.246590][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.274997][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.284558][ T5850] netlink: 'syz.0.5': attribute type 2 has an invalid length. [ 91.306022][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.338377][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.347756][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.410996][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.445629][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.517725][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 91.533926][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.571600][ T5818] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 91.584891][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.599684][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.630034][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.655579][ T5818] usb 4-1: config 0 descriptor?? [ 91.712601][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 91.856170][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.970754][ T27] cfg80211: failed to load regulatory.db [ 92.054298][ T5851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.064073][ T5851] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 92.073216][ T5851] usb 2-1: config 63 has an invalid descriptor of length 55, skipping remainder of the config [ 92.089524][ T5851] usb 2-1: config 63 has no interface number 0 [ 92.096792][ T5851] usb 2-1: config 63 interface 66 has no altsetting 0 [ 92.109335][ T5851] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 92.118558][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.128806][ T5851] usb 2-1: Product: syz [ 92.133011][ T5851] usb 2-1: Manufacturer: syz [ 92.143171][ T5851] usb 2-1: SerialNumber: syz [ 92.747153][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.947450][ T8] usb 1-1: device descriptor read/64, error -71 [ 93.166122][ T51] Bluetooth: hci3: command tx timeout [ 93.171817][ T51] Bluetooth: hci1: command tx timeout [ 93.178138][ T51] Bluetooth: hci0: command tx timeout [ 93.183702][ T5085] Bluetooth: hci2: command tx timeout [ 93.328460][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.518700][ T8] usb 1-1: device descriptor read/64, error -71 [ 93.666129][ T8] usb usb1-port1: attempt power cycle [ 94.035058][ T5818] usb 4-1: USB disconnect, device number 2 [ 94.075954][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.116858][ T8] usb 1-1: device descriptor read/8, error -71 [ 94.160017][ T5873] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.9'. [ 94.303865][ T5877] netlink: 'syz.3.10': attribute type 2 has an invalid length. [ 94.386450][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.416794][ T8] usb 1-1: device descriptor read/8, error -71 [ 94.546762][ T8] usb usb1-port1: unable to enumerate USB device [ 94.639420][ T5851] usb 2-1: USB disconnect, device number 2 [ 94.874818][ T5887] netlink: 'syz.1.13': attribute type 2 has an invalid length. [ 95.437513][ T5901] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.18'. [ 95.528711][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.745862][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 95.758620][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.780606][ T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.792919][ T5817] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 95.828180][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.870022][ T5817] usb 4-1: config 0 descriptor?? [ 95.882121][ T5817] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 95.981330][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.995662][ T5910] dummy_hcd dummy_hcd.0: remove, state 1 [ 96.013469][ T788] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 96.024683][ T5910] usb usb1: USB disconnect, device number 1 [ 96.043970][ T788] usb 1-1: config 63 has an invalid descriptor of length 55, skipping remainder of the config [ 96.057145][ T788] usb 1-1: config 63 has no interface number 0 [ 96.063399][ T788] usb 1-1: config 63 interface 66 has no altsetting 0 [ 96.077923][ T788] usb 1-1: string descriptor 0 read error: -19 [ 96.084288][ T788] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 96.098295][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.113552][ T5910] usb 1-1: USB disconnect, device number 6 [ 96.173732][ T5910] dummy_hcd dummy_hcd.0: stopped [ 96.184069][ T5910] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 96.350984][ T5918] netlink: 'syz.2.25': attribute type 2 has an invalid length. [ 97.525835][ T5851] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.715956][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 97.723249][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.741694][ T5851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.752927][ T5851] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 97.762073][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.770187][ T5851] usb 3-1: Product: syz [ 97.774408][ T5851] usb 3-1: Manufacturer: syz [ 97.779162][ T5851] usb 3-1: SerialNumber: syz [ 98.269058][ T5818] usb 4-1: USB disconnect, device number 3 [ 98.417386][ T5930] netlink: 'syz.3.28': attribute type 2 has an invalid length. [ 98.522292][ T5903] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 98.534130][ T5903] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 98.542587][ T5903] CPU: 0 PID: 5903 Comm: syz.0.19 Not tainted syzkaller #0 [ 98.549793][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.559862][ T5903] RIP: 0010:set_link_state+0x27/0x1000 [ 98.565370][ T5903] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 98.585024][ T5903] RSP: 0018:ffffc90004757718 EFLAGS: 00010046 [ 98.591117][ T5903] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807b531e00 [ 98.599122][ T5903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.607111][ T5903] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 98.615103][ T5903] R10: dffffc0000000000 R11: fffff520008eaecc R12: 0000000000000a02 [ 98.623189][ T5903] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.631182][ T5903] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 98.640138][ T5903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.646745][ T5903] CR2: 00007f8574f01d58 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 98.654745][ T5903] Call Trace: [ 98.658045][ T5903] [ 98.661001][ T5903] ? mutex_lock_nested+0x20/0x20 [ 98.665969][ T5903] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 98.671892][ T5903] dummy_pullup+0xc1/0x120 [ 98.676337][ T5903] ? dummy_set_selfpowered+0x150/0x150 [ 98.681828][ T5903] usb_gadget_disconnect_locked+0x120/0x440 [ 98.687746][ T5903] gadget_unbind_driver+0xc2/0x3e0 [ 98.692882][ T5903] ? gadget_bind_driver+0x770/0x770 [ 98.698108][ T5903] device_release_driver_internal+0x408/0x6f0 [ 98.704203][ T5903] driver_detach+0x1f3/0x2d0 [ 98.708826][ T5903] bus_remove_driver+0x221/0x2f0 [ 98.713794][ T5903] usb_gadget_unregister_driver+0x4e/0x70 [ 98.719542][ T5903] raw_release+0xda/0x260 [ 98.723897][ T5903] ? raw_open+0x520/0x520 [ 98.728252][ T5903] __fput+0x221/0x940 [ 98.732295][ T5903] task_work_run+0x1d4/0x260 [ 98.736921][ T5903] ? task_work_cancel+0x220/0x220 [ 98.741986][ T5903] do_exit+0x986/0x2530 [ 98.746179][ T5903] ? put_task_struct+0xc0/0xc0 [ 98.750983][ T5903] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 98.757010][ T5903] ? get_signal+0x100e/0x1390 [ 98.761708][ T5903] ? lock_chain_count+0x20/0x20 [ 98.766586][ T5903] ? _raw_spin_lock_irq+0xbb/0xf0 [ 98.771642][ T5903] do_group_exit+0x22d/0x2f0 [ 98.776273][ T5903] ? lockdep_hardirqs_on+0x98/0x150 [ 98.781516][ T5903] get_signal+0x12a6/0x1390 [ 98.786047][ T5903] arch_do_signal_or_restart+0xc2/0x7b0 [ 98.791628][ T5903] ? get_sigframe_size+0x20/0x20 [ 98.796602][ T5903] ? exit_to_user_mode_loop+0x3b/0x110 [ 98.802091][ T5903] exit_to_user_mode_loop+0x70/0x110 [ 98.807412][ T5903] exit_to_user_mode_prepare+0xee/0x180 [ 98.813003][ T5903] syscall_exit_to_user_mode+0x1a/0x50 [ 98.818488][ T5903] do_syscall_64+0x61/0xb0 [ 98.822950][ T5903] ? clear_bhb_loop+0x40/0x90 [ 98.827655][ T5903] ? clear_bhb_loop+0x40/0x90 [ 98.832368][ T5903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.838288][ T5903] RIP: 0033:0x7f02e019dd6b [ 98.842744][ T5903] Code: Unable to access opcode bytes at 0x7f02e019dd41. [ 98.849778][ T5903] RSP: 002b:00007f02e1078f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.858219][ T5903] RAX: fffffffffffffffc RBX: 0000000000000005 RCX: 00007f02e019dd6b [ 98.866303][ T5903] RDX: 00007f02e1079fd0 RSI: 0000000080085502 RDI: 0000000000000005 [ 98.874311][ T5903] RBP: 00007f02e1079fd0 R08: 0000000000000045 R09: 00007f02e1078fc8 [ 98.882313][ T5903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 98.890306][ T5903] R13: 0000000800000000 R14: 0000000000000045 R15: 00007f02e02538e2 [ 98.898315][ T5903] [ 98.901358][ T5903] Modules linked in: [ 98.905290][ T5903] ---[ end trace 0000000000000000 ]--- [ 98.910863][ T5903] RIP: 0010:set_link_state+0x27/0x1000 [ 98.916369][ T5903] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 98.936004][ T5903] RSP: 0018:ffffc90004757718 EFLAGS: 00010046 [ 98.942101][ T5903] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807b531e00 [ 98.950111][ T5903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.958136][ T5903] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 98.966128][ T5903] R10: dffffc0000000000 R11: fffff520008eaecc R12: 0000000000000a02 [ 98.974116][ T5903] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.982111][ T5903] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 98.991091][ T5903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.997700][ T5903] CR2: 00007f8574f01d58 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 99.005704][ T5903] Kernel panic - not syncing: Fatal exception [ 99.011920][ T5903] Kernel Offset: disabled [ 99.016272][ T5903] Rebooting in 86400 seconds..