last executing test programs: 19m4.90180138s ago: executing program 4 (id=23): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14}, {0x61}, {0x6}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x5}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x80, &(0x7f00000000c0)="218007e4e796580ec5e536db7c696a679880c5ec5ea7687acc3c8c368d330c9e260d73996fb08aac0b06ea9c241e3ddfc508799d77b969bd625aeffbb704fb077b13022138549033c963016646bdc462fdb43d5c3fb0e8114466ac8db032f14e0eb39f1b75ef5ddda170de998c6ff7026c8d008f8e3e0779c564041fb1a6b05a", 0x73, 0x0, &(0x7f0000000180)="5f111b180b0a84b8567ad12fd283c8521b6f6757171f5df5cdc4c05678c5c1b55988ee106746981bf327fd9d5e5c4f5b8849b0f07859202c1fb099deb589cd2eef0a5d936c2d687e15013fc85f836175d4e1c2f50f27d2cac055e13f66d42e3640ffa3d62089924778f16fd46864433582cc1e"}) close_range(r0, 0xffffffffffffffff, 0x0) 18m59.628549757s ago: executing program 4 (id=33): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xa000, 0x10, 0x20}, 0x18) openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x4ca02, 0x10, 0x20}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000180)={0x18, r7, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x9}]}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r7, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLL', 0xe, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r7, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2}) 18m58.563431445s ago: executing program 4 (id=35): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) write(0xffffffffffffffff, &(0x7f0000000040)="cb", 0xfffffdef) socket$tipc(0x1e, 0x5, 0x0) 18m56.327394538s ago: executing program 4 (id=41): r0 = socket(0x10, 0x3, 0x4) write$bt_hci(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @ioapic={0x3000, 0x10000, 0x5, 0x9, 0x0, [{0xa, 0x58, 0x0, '\x00', 0x1}, {0x65, 0x22, 0x7, '\x00', 0x2}, {0xb, 0x4, 0x3, '\x00', 0x31}, {0xf7, 0x4, 0xc, '\x00', 0x1}, {0x4, 0x1, 0x5, '\x00', 0x6}, {0x0, 0x5, 0x7, '\x00', 0x3c}, {0x7f, 0x6, 0x5, '\x00', 0x80}, {0x1, 0x83, 0x8, '\x00', 0x7}, {0x9, 0x45, 0x3, '\x00', 0x2}, {0x3, 0x3, 0xa, '\x00', 0x6}, {0x5, 0x1b, 0x4, '\x00', 0x9}, {0x4, 0x8, 0x69, '\x00', 0x6b}, {0x8, 0x86, 0xe, '\x00', 0xb}, {0xb, 0x6, 0x9, '\x00', 0x2f}, {0x0, 0x2, 0xfc, '\x00', 0x8}, {0xe, 0x9, 0x10, '\x00', 0x10}, {0x9, 0xe, 0x8, '\x00', 0x10}, {0x9, 0x2, 0x9, '\x00', 0x88}, {0x6, 0x4, 0xc9, '\x00', 0x3}, {0xe4, 0xc2, 0x9, '\x00', 0x4}, {0x6, 0x0, 0xe4, '\x00', 0xf8}, {0xf, 0xa, 0x2, '\x00', 0x3}, {0xdb, 0x92, 0x8, '\x00', 0xe}, {0xc, 0x9, 0xf7, '\x00', 0x8}]}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @local}, &(0x7f0000000040)=0xc) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x140) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020630accff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000100)={0x5, 0x1e, 0x2, 0x0, "0da2568cc3d0a5b92975ca236897501b76de21fd2e5a3540160fca83cbb1445d"}) 18m52.649676207s ago: executing program 4 (id=50): openat$dir(0xffffffffffffff9c, 0x0, 0x80102, 0x10e) socket$nl_audit(0x10, 0x3, 0x9) socket$inet(0xa, 0x801, 0x84) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0xe, 0x7f, 0x0, 0x1, [0x0], [0x0, 0x29, 0x3, 0x1], [], [0xfffffffffffffffd, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) 18m51.690251691s ago: executing program 4 (id=53): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x73) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r4, @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0003a09000008009f000d000000080026006c090000944a87dd7f72d6efd14aa86a8a11b3dfee0b200202fd66e105a6506b41d01def9195845d66202bd04f7263ee19cc4238e9d5c0c18a404ae52a471dd1a801d150aff32458833e3e04cf51e8a16df979b848038429dd5ec019a7c475346dbe6474402ea1890c0f8b5cb3253b2ef4e54144aace14f43987755d4535c3329d1ec17b3cd3b34c1871f8082d44a6fddcda55e29c3885df1cf4eff6462b41119af18d38907d"], 0x40}}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="2022020000006c52"], 0x0, 0x0, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x10, 0x7, 0x6, "a900", "a1b78fe2"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x6, 0x2, 0xf0, 0x7ff, 0xa}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="000fce0000002346be350169e8c11428100d635af5922d557b51891c1a30698323f562498ce55c69dc795c8d88e20bd4cc3e9944a47f9d2f0eef0344b2023be4ec8ccce3e5e80c0382601a831657262faf9953dea3e68738fc79f94146feac0c2bc3a1ebc8f1c6f72c015069b5b67aa952db5c47c0446df9b35a6e7ed2a4b864adb27d4d7a41f66022b7e09b2ad0848d4655525a544d82ad21e37fdef6aaf7803a2268953af151f2db7ff0c525f5cfe0d9559325e07dab0a21cb5cfb6ac0affa75ebb50babc0967ddc2233797875985a16994248"], &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001340)=ANY=[@ANYBLOB="200008000000f30000008f0d6b51ebae950f1614d4bc206793a3d9f62fd1e6488c1be1b444538c567937ddba3c11e8eba829c230c6e1d6c4bc5167acc202c8d77e4986ad9e0c03f80e31b7e7a87d802df5f7b275940dd7bcd61d704d05160967024b6903a2160a46c483864c7f5991352d0c6d9df163c467ade63325abdb8fe7b7def263e599ad9576db31205ac51649b602e05ce43be83679b85b3011d8d56e48bf18522508f73d4622cdd7eac121764b3becb096730ef0f82fb5a504ad9418258a677fbe812df4aacbc5"], &(0x7f0000000a00)={0x40, 0x7, 0xffffffffffffff7b, 0x6}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "f1cd"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x53f8}, &(0x7f0000000b00)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000000b80)={0x40, 0x19, 0x2}, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x6}, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f061, 0xffffffff}) mmap(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r7, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x400000000000354, 0x0) 18m36.504309205s ago: executing program 32 (id=53): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x73) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r4, @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0003a09000008009f000d000000080026006c090000944a87dd7f72d6efd14aa86a8a11b3dfee0b200202fd66e105a6506b41d01def9195845d66202bd04f7263ee19cc4238e9d5c0c18a404ae52a471dd1a801d150aff32458833e3e04cf51e8a16df979b848038429dd5ec019a7c475346dbe6474402ea1890c0f8b5cb3253b2ef4e54144aace14f43987755d4535c3329d1ec17b3cd3b34c1871f8082d44a6fddcda55e29c3885df1cf4eff6462b41119af18d38907d"], 0x40}}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="2022020000006c52"], 0x0, 0x0, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x10, 0x7, 0x6, "a900", "a1b78fe2"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x6, 0x2, 0xf0, 0x7ff, 0xa}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="000fce0000002346be350169e8c11428100d635af5922d557b51891c1a30698323f562498ce55c69dc795c8d88e20bd4cc3e9944a47f9d2f0eef0344b2023be4ec8ccce3e5e80c0382601a831657262faf9953dea3e68738fc79f94146feac0c2bc3a1ebc8f1c6f72c015069b5b67aa952db5c47c0446df9b35a6e7ed2a4b864adb27d4d7a41f66022b7e09b2ad0848d4655525a544d82ad21e37fdef6aaf7803a2268953af151f2db7ff0c525f5cfe0d9559325e07dab0a21cb5cfb6ac0affa75ebb50babc0967ddc2233797875985a16994248"], &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001340)=ANY=[@ANYBLOB="200008000000f30000008f0d6b51ebae950f1614d4bc206793a3d9f62fd1e6488c1be1b444538c567937ddba3c11e8eba829c230c6e1d6c4bc5167acc202c8d77e4986ad9e0c03f80e31b7e7a87d802df5f7b275940dd7bcd61d704d05160967024b6903a2160a46c483864c7f5991352d0c6d9df163c467ade63325abdb8fe7b7def263e599ad9576db31205ac51649b602e05ce43be83679b85b3011d8d56e48bf18522508f73d4622cdd7eac121764b3becb096730ef0f82fb5a504ad9418258a677fbe812df4aacbc5"], &(0x7f0000000a00)={0x40, 0x7, 0xffffffffffffff7b, 0x6}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "f1cd"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x53f8}, &(0x7f0000000b00)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000000b80)={0x40, 0x19, 0x2}, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x6}, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f061, 0xffffffff}) mmap(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r7, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x400000000000354, 0x0) 11m38.99677343s ago: executing program 5 (id=1238): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) ioctl$BLKRRPART(r1, 0x1268, 0x0) 11m38.446336256s ago: executing program 5 (id=1241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 11m38.166718698s ago: executing program 5 (id=1244): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x5c}}, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000102f17000500000000000109022d000100000000090400000103000000092100000301220500090581030000f9000009050203200003ff06629f73f0775980afa6574b5a66b4d324cec45316beb9d8dcc48c51efb9964866e06b34451ca62245ac56f82e42cf0de14e8477a32a125ed1febd641686bb9050fb7e5006a94e0cd28f4d65d21b724e8dc4647f705ec7234277e66c4ee68503fd342abbeff4494acfcb90e9c41fa3a857933bc463528fba1aa615cdda40d69503f493f6d54788449c5da40f5cae63bf6343b48cf7d166d73a806eea23c9cee154fb5156e2"], 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x150, 0x150, 0x0, 0x90a, 0x1e8, 0x238, 0x238, 0x1e8, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8001}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 11m33.371838414s ago: executing program 5 (id=1254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 11m33.104865685s ago: executing program 5 (id=1256): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x81, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ce0000b703000000000000850000009b000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0xe, 0x0, &(0x7f0000000580)="0033f7424d552fa4c53bcf9cedcb", 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0, 0x37, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) getrusage(0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]}) 11m32.542699337s ago: executing program 5 (id=1258): lsm_set_self_attr(0x66, 0x0, 0x1020, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0xc8400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = dup3(r2, r1, 0x0) r4 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940), 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641777f56c7556d0072577bc6fcfb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad548d62a3b45bb98872fb1900"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg2\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 11m16.93397548s ago: executing program 33 (id=1258): lsm_set_self_attr(0x66, 0x0, 0x1020, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0xc8400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = dup3(r2, r1, 0x0) r4 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940), 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641777f56c7556d0072577bc6fcfb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad548d62a3b45bb98872fb1900"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg2\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 3m11.962109624s ago: executing program 3 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r3 = accept4(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e20, @multicast1=0x7f000001}}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x5c}}, 0x0) preadv(r8, &(0x7f0000002700)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, 0x2000000, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="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", 0x10d}], 0x1, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x104}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1) 3m10.795143831s ago: executing program 3 (id=2846): lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1700000056000500000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x23, 0x0, &(0x7f00000004c0)="84d5cde5f114ec3bd951e6df91fe1a6b2e8a3c149b328356f082364d5c6804711a99bc"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) syz_clone(0x10000000, &(0x7f0000000240)="b78084fe464e542c99e9c2e243baacfe2667e9c40e8413eecaff0e8d2597ec23e6d81da55b3ef655abc23ae05d83f0b9956b266e75be02d727b90a95380634278232be2934522c76ae70f0b53d2f7d96c083713207e131948e60beb1e27cf65232722b5e4888f9f8036fbb6b083e3f36fb1a8f1d8ff59523ac7a4bb3fdec5db902b3cbea179263dbf4323756d5c3ee4c3f041fbe51", 0x95, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="cdc3af15b38f596d9d14111ddd594dae2a48c8b1adc98c40837317758c49b6e3caf62debfee55e5f047a7026e972de65cde9a30f0bdaae8d071f4a0279f5832fa39f564ee20aff9814e85446b71072d11d958a921228d86796c7674a97d0bd9dc4a86f0a0ed7fd49582b9570341b26bb190bbcb13751e7928167fdb069c5c662b9198f4e0c61d3959529eb97cc254802d20db0b5279ecca03384debd377ae95deac26a7cd1ee598e41740b8c282b29da0294f0e0c5741434900ef08339215e58fb24ff043ff3bed3ebcc8cf2ef") r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xbe, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x5e22, 0x7fff, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x2, 0x40) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 3m9.293382883s ago: executing program 3 (id=2849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2], 0x48}}, 0x0) 3m9.195259724s ago: executing program 3 (id=2851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0, r2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502) mmap$xdp(&(0x7f000068d000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'new '}, 0x1c, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0xffff, 0x6, 0x0, 0x100003, 0x8001}, 0x14) 3m7.634877035s ago: executing program 3 (id=2853): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x81, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ce0000b703000000000000850000009b000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x0, 0x37, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xdd, 0x5, 0x8, 0x3400, r5, 0xd032, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0xc, @void, @value, @void, @value}, 0x50) getrusage(0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r6, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]}) 3m4.828572996s ago: executing program 3 (id=2856): lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1700000056000500000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4c602, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) gettid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x10000000, &(0x7f0000000240)="b78084fe464e542c99e9c2e243baacfe2667e9c40e8413eecaff0e8d2597ec23e6d81da55b3ef655abc23ae05d83f0b9956b266e75be02d727b90a95380634278232be2934522c76ae70f0b53d2f7d96c083713207e131948e60beb1e27cf65232722b5e4888f9f8036fbb6b083e3f36fb1a8f1d8ff59523ac7a4bb3fdec5db902b3cbea179263dbf4323756d5c3ee4c3f041fbe51", 0x95, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="cdc3af15b38f596d9d14111ddd594dae2a48c8b1adc98c40837317758c49b6e3caf62debfee55e5f047a7026e972de65cde9a30f0bdaae8d071f4a0279f5832fa39f564ee20aff9814e85446b71072d11d958a921228d86796c7674a97d0bd9dc4a86f0a0ed7fd49582b9570341b26bb190bbcb13751e7928167fdb069c5c662b9198f4e0c61d3959529eb97cc254802d20db0b5279ecca03384debd377ae95deac26a7cd1ee598e41740b8c282b29da0294f0e0c5741434900ef08339215e58fb24ff043ff3bed3ebcc8cf2ef") sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xbe, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x5e22, 0x7fff, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x2, 0x40) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 2m49.471268232s ago: executing program 34 (id=2856): lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1700000056000500000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4c602, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) gettid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x10000000, &(0x7f0000000240)="b78084fe464e542c99e9c2e243baacfe2667e9c40e8413eecaff0e8d2597ec23e6d81da55b3ef655abc23ae05d83f0b9956b266e75be02d727b90a95380634278232be2934522c76ae70f0b53d2f7d96c083713207e131948e60beb1e27cf65232722b5e4888f9f8036fbb6b083e3f36fb1a8f1d8ff59523ac7a4bb3fdec5db902b3cbea179263dbf4323756d5c3ee4c3f041fbe51", 0x95, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="cdc3af15b38f596d9d14111ddd594dae2a48c8b1adc98c40837317758c49b6e3caf62debfee55e5f047a7026e972de65cde9a30f0bdaae8d071f4a0279f5832fa39f564ee20aff9814e85446b71072d11d958a921228d86796c7674a97d0bd9dc4a86f0a0ed7fd49582b9570341b26bb190bbcb13751e7928167fdb069c5c662b9198f4e0c61d3959529eb97cc254802d20db0b5279ecca03384debd377ae95deac26a7cd1ee598e41740b8c282b29da0294f0e0c5741434900ef08339215e58fb24ff043ff3bed3ebcc8cf2ef") sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xbe, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x5e22, 0x7fff, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x2, 0x40) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 11.813200074s ago: executing program 0 (id=3326): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 10.439734336s ago: executing program 1 (id=3330): syz_open_dev$sndctrl(0x0, 0x100, 0x400000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) socket(0x840000000002, 0x3, 0xff) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f039000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 10.439404403s ago: executing program 2 (id=3331): lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x23, 0x0, &(0x7f00000004c0)="84d5cde5f114ec3bd951e6df91fe1a6b2e8a3c149b328356f082364d5c6804711a99bc"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) syz_clone(0x10000000, &(0x7f0000000240)="b78084fe464e542c99e9c2e243baacfe2667e9c40e8413eecaff0e8d2597ec23e6d81da55b3ef655abc23ae05d83f0b9956b266e75be02d727b90a95380634278232be2934522c76ae70f0b53d2f7d96c083713207e131948e60beb1e27cf65232722b5e4888f9f8036fbb6b083e3f36fb1a8f1d8ff59523ac7a4bb3fdec5db902b3cbea179263dbf4323756d5c3ee4c3f041fbe51", 0x95, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="cdc3af15b38f596d9d14111ddd594dae2a48c8b1adc98c40837317758c49b6e3caf62debfee55e5f047a7026e972de65cde9a30f0bdaae8d071f4a0279f5832fa39f564ee20aff9814e85446b71072d11d958a921228d86796c7674a97d0bd9dc4a86f0a0ed7fd49582b9570341b26bb190bbcb13751e7928167fdb069c5c662b9198f4e0c61d3959529eb97cc254802d20db0b5279ecca03384debd377ae95deac26a7cd1ee598e41740b8c282b29da0294f0e0c5741434900ef08339215e58fb24ff043ff3bed3ebcc8cf2ef") r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xbe, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x5e22, 0x7fff, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x2, 0x40) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 9.158843849s ago: executing program 1 (id=3334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000480)=0xffffffffffffff40, 0x4) prlimit64(0x0, 0xb, &(0x7f0000000300)={0x5, 0xe58}, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 8.787867457s ago: executing program 0 (id=3335): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x81, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ce0000b703000000000000850000009b000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0xfffffe3f, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000580)="0033f7424d552fa4c53bcf9cedcb72f8", 0x0}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x0, 0x37, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) gettid() r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xdd, 0x5, 0x8, 0x3400, r6, 0xd032, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0xc, @void, @value, @void, @value}, 0x50) getrusage(0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]}) 8.77966424s ago: executing program 1 (id=3336): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xfff, 0x0, 0x0, 0x2, 0x11, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{@fixed}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) syz_open_dev$usbfs(0x0, 0x6, 0x208000) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="00086e0000006e0f252d0ae5f0c23ca7100b"], &(0x7f0000000dc0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "27baa8b489ee95df82b2ed0531202fcb567cf98cd433126745cda96194e6"}}, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) epoll_create(0x1000003) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x7, 0xc2, 0xd, 0x2, 0x3, 0x3e, 0xa, 0xaf, 0x38, 0x378, 0x3, 0x2, 0x20, 0x1, 0x10, 0x6, 0x1}, [{0x4, 0x1000, 0x6c8b, 0x3, 0x7, 0x8, 0x0, 0x351c}], "482378bff7d25dd8f4265f9ef1a1db6fde67eb8b372b218030bcaca723267285bd7c922bf903ebdee909bd24181816d9bdb2853c26e72511633545e9752784881fa6c187740a2b39049550e4fdf62902b2790c723c8b9b4e2af61eb0935b95a4895ec18fb8b795fda0140b52750b9b979c6c9756a4e4b3a086f719f6dfdafb8c741d", ['\x00']}, 0x1da) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000280)=0x400, 0x4) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) 8.229938616s ago: executing program 7 (id=3338): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r3 = accept4(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e20, @multicast1=0x7f000001}}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) preadv(r8, &(0x7f0000002700)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, 0x2000000, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="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", 0x10d}], 0x1, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x104}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1) 8.053984503s ago: executing program 6 (id=3339): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xfffffffffffffffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000060000000d0000000d00000002000000000000000000000f01000000d50000000000"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r6 = open(0x0, 0x145542, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000100)={'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) ftruncate(r6, 0x2007ffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000a3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x0) 7.075246848s ago: executing program 0 (id=3340): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10, 0x0, 0x0) mbind(&(0x7f0000828000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x800, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0x0) 6.908816815s ago: executing program 7 (id=3341): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x32d40, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5035, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000300)={{0x4, 0x5, 0x8000, 0x1, 'syz1\x00', 0x8000}, 0x1, 0x200, 0x4, r1, 0x2, 0x137, 'syz1\x00', &(0x7f0000000180)=['\x00', '\'-[\\}*&-:\x00'], 0xb}) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf256800000008000300", @ANYRES32=r9, @ANYBLOB="1e00c7"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) accept4(r4, 0x0, 0x0, 0x0) 6.531937624s ago: executing program 6 (id=3342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000e00)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB='/'], 0x20) 6.212985893s ago: executing program 6 (id=3343): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e20, @multicast1=0x7f000001}}) r7 = syz_open_procfs(0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0068a677466b6d981c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) preadv(r7, &(0x7f0000002700)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, 0x2000000, 0x0) 5.021336834s ago: executing program 1 (id=3344): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40002) socket(0x28, 0x5, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, &(0x7f0000000880)={{0x3, @bcast}, [@netrom, @rose, @remote, @default, @remote, @rose, @remote, @null]}, &(0x7f0000000040)=0xfffffffffffffee2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000408002540378b5ec30900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a300000000020ad0004801c0001800a00010071756575650000000c0002800600014000170000140000001100010000000000000000000000000aeb7f39df4c43ad4028d9e2fa8dad2ad217b84758a3252d"], 0xd0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) sendmsg(r7, 0x0, 0x48000) 4.921600803s ago: executing program 6 (id=3345): syz_open_dev$sndctrl(0x0, 0x100, 0x400000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) socket(0x840000000002, 0x3, 0xff) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f039000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 4.841123729s ago: executing program 7 (id=3346): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4.187762839s ago: executing program 2 (id=3347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000480)=0xffffffffffffff40, 0x4) prlimit64(0x0, 0xb, &(0x7f0000000300)={0x5, 0xe58}, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 4.105136207s ago: executing program 1 (id=3348): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000040)}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f0000000140)=""/21, 0x15}], 0x4, &(0x7f0000000780)=""/11, 0xb}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001100)=""/245, 0xf5}, {&(0x7f00000007c0)=""/9, 0x9}, {&(0x7f0000001200)=""/188, 0xbc}, {&(0x7f00000012c0)=""/148, 0x94}, {&(0x7f0000001380)=""/162, 0xa2}], 0x5}, 0x8}, {{&(0x7f0000001440)=@tipc, 0x80, &(0x7f0000002540)=[{&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2, &(0x7f0000002580)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003580)=""/180, 0xb4}, {&(0x7f0000003640)=""/178, 0xb2}, {&(0x7f0000003700)=""/63, 0x3f}, {&(0x7f0000003740)=""/41, 0x29}, {0x0}, {&(0x7f00000037c0)=""/141, 0x8d}], 0x6, &(0x7f0000003900)=""/231, 0xe7}, 0xe1b}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003a00)=""/90, 0x5a}], 0x1}, 0xf}, {{&(0x7f0000003ac0)=@nfc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003b40)=""/141, 0x8d}, {&(0x7f0000003c00)=""/27, 0x1b}, {&(0x7f0000003c40)=""/159, 0x9f}, {&(0x7f0000003d00)=""/17, 0x11}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/8, 0x8}], 0x7}, 0x4}], 0x6, 0x10000, &(0x7f0000004fc0)={0x77359400}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f00000006c0)={&(0x7f0000000680)=@can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "f2b4fb1ec29c25fa"}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0xe) io_setup(0x5, &(0x7f0000000000)) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xed}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000150069194c0f0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000380)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x0, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000f00)=""/80}, 0x1}], 0x2a, 0x40012020, 0x0) dup3(r0, r0, 0x0) 3.926404495s ago: executing program 6 (id=3349): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x73) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x10, 0x7, 0x6, "a900", "a1b78fe2"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x6, 0x2, 0xf0, 0x7ff, 0xa}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) mmap(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x80) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x4, 'lblcr\x00', 0x28, 0x4, 0x3}, 0x2c) sendmmsg$sock(r6, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x400000000000354, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 3.686397768s ago: executing program 7 (id=3350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000800", @ANYRES32=r2, @ANYBLOB="06001200000000000600b50085017daa0a000600ffffffffffff0000040013000c0043"], 0x48}}, 0x0) 3.325791497s ago: executing program 2 (id=3351): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r3 = accept4(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e20, @multicast1=0x7f000001}}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) preadv(r8, &(0x7f0000002700)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, 0x2000000, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc9896323860681482162133639a70419a59ff053a577147beab2b5318a2ab9bb40c8df5765c4c457031c51576a5ca09001ca155b77f84f606527ed1bec0f2a2360b64a994ff8093d117f2416c96feae49c6004a160eca8fde90ae6b3f84034e5b4ca407340854bb990e633d7da77e6ba03037018e170a95c12cd279045fc4fcca1db99298be8b7f4265cadc2175add2c98f1a21479d27d64b97ebf1c778303900a9169ee3ed3ad30eb6a8c904afc4e8f88e1af0234b9c216d869ffc392b5c8967c229833c65db7bf5b76eb6e810f0e0d8", 0x10d}], 0x1, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x104}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1) 3.073166868s ago: executing program 0 (id=3352): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x81, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ce0000b703000000000000850000009b000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0xfffffe3f, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000580)="0033f7424d552fa4c53bcf9cedcb72f8", 0x0}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x0, 0x37, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) gettid() r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xdd, 0x5, 0x8, 0x3400, r6, 0xd032, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0xc, @void, @value, @void, @value}, 0x50) getrusage(0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]}) 3.038117666s ago: executing program 7 (id=3353): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xfffffffffffffffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000060000000d0000000d00000002000000000000000000000f01000000d50000000000"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r6 = open(0x0, 0x145542, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000100)={'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) ftruncate(r6, 0x2007ffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000a3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x0) 2.191916252s ago: executing program 2 (id=3354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000e00)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB='/'], 0x20) 2.183385186s ago: executing program 1 (id=3355): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xfff, 0x0, 0x0, 0x2, 0x11, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{@fixed}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) syz_open_dev$usbfs(0x0, 0x6, 0x208000) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="00086e0000006e0f252d0ae5f0c23ca7100b"], &(0x7f0000000dc0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "27baa8b489ee95df82b2ed0531202fcb567cf98cd433126745cda96194e6"}}, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) epoll_create(0x1000003) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x7, 0xc2, 0xd, 0x2, 0x3, 0x3e, 0xa, 0xaf, 0x38, 0x378, 0x3, 0x2, 0x20, 0x1, 0x10, 0x6, 0x1}, [{0x4, 0x1000, 0x6c8b, 0x3, 0x7, 0x8, 0x0, 0x351c}], "482378bff7d25dd8f4265f9ef1a1db6fde67eb8b372b218030bcaca723267285bd7c922bf903ebdee909bd24181816d9bdb2853c26e72511633545e9752784881fa6c187740a2b39049550e4fdf62902b2790c723c8b9b4e2af61eb0935b95a4895ec18fb8b795fda0140b52750b9b979c6c9756a4e4b3a086f719f6dfdafb8c741d", ['\x00']}, 0x1da) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000280)=0x400, 0x4) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) 2.025075342s ago: executing program 2 (id=3356): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e20, @multicast1=0x7f000001}}) r7 = syz_open_procfs(0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0068a677466b6d981c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) preadv(r7, &(0x7f0000002700)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, 0x2000000, 0x0) 1.249309283s ago: executing program 0 (id=3357): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x32d40, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5035, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000300)={{0x4, 0x5, 0x8000, 0x1, 'syz1\x00', 0x8000}, 0x1, 0x200, 0x4, r1, 0x2, 0x137, 'syz1\x00', &(0x7f0000000180)=['\x00', '\'-[\\}*&-:\x00'], 0xb}) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf256800000008000300", @ANYRES32=r9, @ANYBLOB="1e00c7"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) accept4(r4, 0x0, 0x0, 0x0) 1.191156099s ago: executing program 7 (id=3358): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40002) socket(0x28, 0x5, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, &(0x7f0000000880)={{0x3, @bcast}, [@netrom, @rose, @remote, @default, @remote, @rose, @remote, @null]}, &(0x7f0000000040)=0xfffffffffffffee2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000408002540378b5ec30900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a300000000020ad0004801c0001800a00010071756575650000000c0002800600014000170000140000001100010000000000000000000000000aeb7f39df4c43ad4028d9e2fa8dad2ad217b84758a3252d"], 0xd0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) sendmsg(r7, 0x0, 0x48000) 1.037160483s ago: executing program 2 (id=3359): syz_open_dev$sndctrl(0x0, 0x100, 0x400000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) socket(0x840000000002, 0x3, 0xff) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f039000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 443.568351ms ago: executing program 6 (id=3360): lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x23, 0x0, &(0x7f00000004c0)="84d5cde5f114ec3bd951e6df91fe1a6b2e8a3c149b328356f082364d5c6804711a99bc"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) syz_clone(0x10000000, &(0x7f0000000240)="b78084fe464e542c99e9c2e243baacfe2667e9c40e8413eecaff0e8d2597ec23e6d81da55b3ef655abc23ae05d83f0b9956b266e75be02d727b90a95380634278232be2934522c76ae70f0b53d2f7d96c083713207e131948e60beb1e27cf65232722b5e4888f9f8036fbb6b083e3f36fb1a8f1d8ff59523ac7a4bb3fdec5db902b3cbea179263dbf4323756d5c3ee4c3f041fbe51", 0x95, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="cdc3af15b38f596d9d14111ddd594dae2a48c8b1adc98c40837317758c49b6e3caf62debfee55e5f047a7026e972de65cde9a30f0bdaae8d071f4a0279f5832fa39f564ee20aff9814e85446b71072d11d958a921228d86796c7674a97d0bd9dc4a86f0a0ed7fd49582b9570341b26bb190bbcb13751e7928167fdb069c5c662b9198f4e0c61d3959529eb97cc254802d20db0b5279ecca03384debd377ae95deac26a7cd1ee598e41740b8c282b29da0294f0e0c5741434900ef08339215e58fb24ff043ff3bed3ebcc8cf2ef") r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xbe, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x5e22, 0x7fff, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x2, 0x40) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002dc0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 0s ago: executing program 0 (id=3361): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): 8.370188][ T117] em28xx 4-1:0.132: Remote control support is not available for this card. [ 768.381335][ T5893] em28xx 4-1:0.132: Closing input extension [ 768.403336][ T5893] em28xx 4-1:0.132: Freeing device [ 768.432138][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 768.619803][ T9] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 768.631908][ T9] usb 2-1: config 1 has no interface number 0 [ 768.638076][ T9] usb 2-1: config 1 interface 3 has no altsetting 0 [ 768.647498][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0012, bcdDevice=aa.5a [ 768.660107][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.668862][ T9] usb 2-1: Product: syz [ 768.674086][ T9] usb 2-1: Manufacturer: syz [ 768.678816][ T9] usb 2-1: SerialNumber: syz [ 770.711937][T14581] block nbd6: shutting down sockets [ 771.263950][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 771.270982][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 771.941219][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 772.085927][ T9] usb 2-1: USB disconnect, device number 54 [ 772.209005][T14610] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 772.780633][ T29] audit: type=1400 audit(1737200872.670:643): avc: denied { bind } for pid=14614 comm="syz.3.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 773.534320][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2097'. [ 773.563514][ T29] audit: type=1400 audit(1737200873.400:644): avc: denied { getopt } for pid=14624 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 776.211630][T14665] netlink: 'syz.6.2105': attribute type 10 has an invalid length. [ 777.461557][ T29] audit: type=1400 audit(1737200877.340:645): avc: denied { read } for pid=14663 comm="syz.2.2107" laddr=fe88::3 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 777.625219][T14677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 778.034816][T14686] ip6t_rpfilter: unknown options [ 778.248671][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2112'. [ 778.266646][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 778.276095][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 778.372071][ T5865] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 778.538314][ T5865] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 778.547761][ T5865] usb 1-1: config 0 has no interface number 0 [ 778.582924][ T5865] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 778.730430][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.740127][ T5865] usb 1-1: config 0 descriptor?? [ 778.906521][ T5865] usb 1-1: selecting invalid altsetting 1 [ 778.913526][ T5865] dvb_ttusb_budget: ttusb_init_controller: error [ 778.919890][ T5865] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 778.954705][ T5865] DVB: Unable to find symbol cx22700_attach() [ 778.993649][ T5865] DVB: Unable to find symbol tda10046_attach() [ 779.007144][ T5865] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 779.114136][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.142003][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.294015][ C0] Unknown status report in ack skb [ 780.308253][ T5862] usb 1-1: USB disconnect, device number 60 [ 780.318834][ T5865] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 780.481953][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 780.492737][ T5865] usb 7-1: unable to get BOS descriptor or descriptor too short [ 780.502470][ T5865] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 780.523902][ T5865] usb 7-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=a5.0b [ 780.536818][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.545412][ T5865] usb 7-1: Product: syz [ 780.554269][ T5865] usb 7-1: Manufacturer: syz [ 780.559018][ T5865] usb 7-1: SerialNumber: syz [ 781.143288][T14723] netlink: 'syz.3.2119': attribute type 10 has an invalid length. [ 781.520308][ T5865] pegasus 7-1:3.0: probe with driver pegasus failed with error -71 [ 781.531126][ T5865] usb 7-1: USB disconnect, device number 14 [ 783.180592][T14742] FAULT_INJECTION: forcing a failure. [ 783.180592][T14742] name failslab, interval 1, probability 0, space 0, times 0 [ 783.193408][T14742] CPU: 1 UID: 0 PID: 14742 Comm: syz.1.2123 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 783.204187][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 783.214246][T14742] Call Trace: [ 783.217527][T14742] [ 783.220461][T14742] dump_stack_lvl+0x16c/0x1f0 [ 783.225152][T14742] should_fail_ex+0x497/0x5b0 [ 783.229839][T14742] ? fs_reclaim_acquire+0xae/0x150 [ 783.234959][T14742] should_failslab+0xc2/0x120 [ 783.239643][T14742] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 783.245021][T14742] ? getname_flags.part.0+0x4c/0x550 [ 783.250321][T14742] getname_flags.part.0+0x4c/0x550 [ 783.255446][T14742] ? bpf_lsm_capable+0x9/0x10 [ 783.260223][T14742] getname+0x8d/0xe0 [ 783.264120][T14742] __x64_sys_acct+0x73/0x220 [ 783.268717][T14742] ? lockdep_hardirqs_on+0x7c/0x110 [ 783.273924][T14742] do_syscall_64+0xcd/0x250 [ 783.278436][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.284343][T14742] RIP: 0033:0x7fa1b4d85d29 [ 783.288759][T14742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.308376][T14742] RSP: 002b:00007fa1b2bd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 783.316808][T14742] RAX: ffffffffffffffda RBX: 00007fa1b4f76160 RCX: 00007fa1b4d85d29 [ 783.324802][T14742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 783.332777][T14742] RBP: 00007fa1b2bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 783.340746][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.348739][T14742] R13: 0000000000000000 R14: 00007fa1b4f76160 R15: 00007ffe1bd45478 [ 783.356723][T14742] [ 783.366859][T14743] ip6t_rpfilter: unknown options [ 784.102034][T14749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 784.316306][T14763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 786.689155][T14811] ip6t_rpfilter: unknown options [ 786.941605][T14813] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 787.197302][T14816] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2147'. [ 787.301917][ T5893] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 788.154787][ T5893] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 788.163700][ T5893] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 788.174066][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 788.183130][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 788.194600][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 788.668739][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 788.679680][ T5893] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 788.711968][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 788.720024][ T5893] usb 2-1: Product: syz [ 788.724273][ T5893] usb 2-1: Manufacturer: syz [ 788.771991][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 788.777286][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 788.792077][ T5893] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 788.798026][ T5893] cdc_wdm 2-1:1.0: Unknown control protocol [ 788.846414][T14837] FAULT_INJECTION: forcing a failure. [ 788.846414][T14837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.872558][T14837] CPU: 0 UID: 0 PID: 14837 Comm: syz.0.2156 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 788.883382][T14837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 788.893458][T14837] Call Trace: [ 788.896750][T14837] [ 788.899700][T14837] dump_stack_lvl+0x16c/0x1f0 [ 788.904409][T14837] should_fail_ex+0x497/0x5b0 [ 788.909115][T14837] _copy_from_user+0x2e/0xd0 [ 788.913718][T14837] copy_msghdr_from_user+0x99/0x160 [ 788.918912][T14837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 788.924715][T14837] ___sys_sendmsg+0xff/0x1e0 [ 788.929295][T14837] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.934493][T14837] ? __pfx_lock_release+0x10/0x10 [ 788.939505][T14837] ? trace_lock_acquire+0x14e/0x1f0 [ 788.944730][T14837] ? __fget_files+0x206/0x3a0 [ 788.949422][T14837] __sys_sendmsg+0x16e/0x220 [ 788.954009][T14837] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.959118][T14837] do_syscall_64+0xcd/0x250 [ 788.963621][T14837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.969516][T14837] RIP: 0033:0x7fa4f1585d29 [ 788.973917][T14837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.993511][T14837] RSP: 002b:00007fa4ef3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.001911][T14837] RAX: ffffffffffffffda RBX: 00007fa4f1775fa0 RCX: 00007fa4f1585d29 [ 789.009870][T14837] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 789.017824][T14837] RBP: 00007fa4ef3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 789.025779][T14837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.033753][T14837] R13: 0000000000000000 R14: 00007fa4f1775fa0 R15: 00007ffe8eec4ed8 [ 789.041721][T14837] [ 789.073292][ T9] usb 2-1: USB disconnect, device number 55 [ 791.261929][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 792.392912][T14868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 792.580543][ T25] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 792.865444][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 793.135138][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 793.792169][ T25] usb 1-1: unable to read config index 0 descriptor/all [ 793.799191][ T25] usb 1-1: can't read configurations, error -71 [ 793.869713][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 794.923355][T14906] netlink: 'syz.1.2173': attribute type 10 has an invalid length. [ 795.006907][ T29] audit: type=1400 audit(1737200894.900:646): avc: denied { listen } for pid=14899 comm="syz.1.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 795.348708][T14898] block nbd6: shutting down sockets [ 795.364888][T14906] syz_tun: entered promiscuous mode [ 795.375683][T14906] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 796.828714][T14922] netlink: 'syz.0.2178': attribute type 2 has an invalid length. [ 797.400845][T14925] block nbd1: shutting down sockets [ 797.485155][T14937] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2183'. [ 798.364945][T14944] block nbd3: shutting down sockets [ 799.114195][T14964] ip6t_rpfilter: unknown options [ 800.660615][T14977] can: request_module (can-proto-0) failed. [ 800.711035][T14976] delete_channel: no stack [ 800.970646][T14991] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 800.978504][T14991] audit: out of memory in audit_log_start [ 800.987701][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'. [ 800.996804][T14991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2197'. [ 801.005883][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 802.000222][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2198'. [ 802.009343][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2198'. [ 802.018434][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2198'. [ 802.430078][T15000] vlan2: entered allmulticast mode [ 804.173296][ T29] audit: type=1326 audit(1737200903.600:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.3.2205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4664185d29 code=0x0 [ 805.377576][T15033] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 805.419541][T15033] bond1: entered promiscuous mode [ 805.425751][T15033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.998187][T15053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2213'. [ 808.412989][T15073] block nbd6: shutting down sockets [ 808.953148][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.033192][T15078] sctp: [Deprecated]: syz.0.2222 (pid 15078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.033192][T15078] Use struct sctp_sack_info instead [ 810.050316][ T29] audit: type=1400 audit(1737200909.930:648): avc: denied { getopt } for pid=15075 comm="syz.0.2222" lport=57891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 810.077046][ T29] audit: type=1400 audit(1737200909.970:649): avc: denied { write } for pid=15075 comm="syz.0.2222" lport=57891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 810.120526][ T29] audit: type=1400 audit(1737200909.970:650): avc: denied { setopt } for pid=15075 comm="syz.0.2222" lport=57891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 810.197941][T15078] netlink: 'syz.0.2222': attribute type 2 has an invalid length. [ 811.160976][T15104] block nbd3: shutting down sockets [ 811.315396][T15107] ip6t_rpfilter: unknown options [ 812.302356][T15131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2237'. [ 812.861346][T15136] netlink: 'syz.3.2238': attribute type 10 has an invalid length. [ 813.543735][ T117] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 813.873289][T15138] block nbd1: shutting down sockets [ 813.886974][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 813.898397][ T117] usb 1-1: config 6 has an invalid interface number: 204 but max is 2 [ 813.907298][ T117] usb 1-1: config 6 has an invalid interface number: 79 but max is 2 [ 813.947216][ T117] usb 1-1: config 6 has an invalid interface number: 249 but max is 2 [ 813.971244][ T117] usb 1-1: config 6 has no interface number 0 [ 813.986679][ T117] usb 1-1: config 6 has no interface number 1 [ 814.146707][ T117] usb 1-1: config 6 has no interface number 2 [ 814.668845][ T117] usb 1-1: config 6 interface 204 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 814.684412][ T117] usb 1-1: config 6 interface 249 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 814.695681][ T117] usb 1-1: config 6 interface 249 altsetting 5 bulk endpoint 0xE has invalid maxpacket 1023 [ 814.707421][ T117] usb 1-1: config 6 interface 204 has no altsetting 0 [ 814.765395][ T117] usb 1-1: config 6 interface 79 has no altsetting 0 [ 814.780573][ T117] usb 1-1: config 6 interface 249 has no altsetting 0 [ 814.795453][ T117] usb 1-1: string descriptor 0 read error: -71 [ 814.805954][ T117] usb 1-1: New USB device found, idVendor=05c6, idProduct=9090, bcdDevice=8e.65 [ 814.831894][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.876822][ T117] usb 1-1: can't set config #6, error -71 [ 814.886311][ T117] usb 1-1: USB disconnect, device number 63 [ 815.698438][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 815.733889][T15168] block nbd1: shutting down sockets [ 815.859569][ T25] usb 7-1: device descriptor read/64, error -71 [ 816.181313][ T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 816.377579][ T25] usb 7-1: device descriptor read/64, error -71 [ 816.496017][ T25] usb usb7-port1: attempt power cycle [ 816.842030][ T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 816.874068][ T25] usb 7-1: device descriptor read/8, error -71 [ 817.112701][ T25] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 817.142458][ T25] usb 7-1: device descriptor read/8, error -71 [ 817.263500][ T25] usb usb7-port1: unable to enumerate USB device [ 818.963357][ T29] audit: type=1400 audit(1737200918.860:651): avc: denied { setopt } for pid=15219 comm="syz.2.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 819.182093][T14283] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 819.336306][T14283] usb 4-1: config 2 has an invalid interface number: 149 but max is 0 [ 819.344892][T14283] usb 4-1: config 2 has no interface number 0 [ 819.360158][T14283] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a9.22 [ 819.371638][T14283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.396923][T14283] usb 4-1: Product: syz [ 819.403559][T14283] usb 4-1: Manufacturer: syz [ 819.408235][T14283] usb 4-1: SerialNumber: syz [ 819.644965][T14283] imon_raw 4-1:2.149: IR endpoint missing [ 819.655116][T14283] usb 4-1: USB disconnect, device number 51 [ 819.707155][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 824.171859][ T5862] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 825.191920][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 825.207396][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.217710][ T5862] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.232707][ T5862] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 825.241929][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.291546][ T5862] usb 1-1: config 0 descriptor?? [ 825.672698][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 825.783038][T15271] block nbd3: shutting down sockets [ 827.675700][T15300] block nbd3: shutting down sockets [ 827.681045][ T5893] usb 1-1: USB disconnect, device number 64 [ 830.761894][T15340] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2288'. [ 831.691189][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2292'. [ 833.433951][ T29] audit: type=1400 audit(1737200933.330:652): avc: denied { search } for pid=15364 comm="syz.3.2296" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 833.831921][ T25] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 834.054785][T15377] ip6t_rpfilter: unknown options [ 834.871139][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 834.894662][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.907621][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 834.916975][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.926683][ T25] usb 1-1: config 0 descriptor?? [ 834.934969][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 835.169165][ T25] gspca_vc032x: reg_r err -32 [ 835.192124][ T25] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 835.539651][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2305'. [ 836.722525][ T25] usb 1-1: USB disconnect, device number 65 [ 838.624973][T15428] No control pipe specified [ 839.591418][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2318'. [ 839.792218][ T29] audit: type=1400 audit(1737200939.650:653): avc: denied { connect } for pid=15453 comm="syz.3.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 839.876722][ T29] audit: type=1400 audit(1737200939.770:654): avc: denied { write } for pid=15453 comm="syz.3.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 845.891615][T15544] netlink: 'syz.1.2347': attribute type 10 has an invalid length. [ 846.311206][ T5865] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 846.360881][ T5893] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 846.591893][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 846.732004][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 846.753237][ T5865] usb 1-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 846.772309][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.797300][ T5865] usb 1-1: Product: syz [ 846.906284][ T5865] usb 1-1: Manufacturer: syz [ 847.075859][ T5865] usb 1-1: SerialNumber: syz [ 847.107523][ T5893] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.129210][ T5893] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 847.170232][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.342340][ T5865] usb 1-1: config 0 descriptor?? [ 847.349882][ T5865] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 847.372052][ T5893] usb 7-1: config 0 descriptor?? [ 847.393841][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 847.579666][ T5893] gspca_vc032x: reg_r err -32 [ 847.584688][ T5893] vc032x 7-1:0.0: probe with driver vc032x failed with error -32 [ 848.093268][ T5865] pwc: send_video_command error -71 [ 848.098576][ T5865] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 848.109068][ T5865] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 848.206450][ T5865] usb 1-1: USB disconnect, device number 66 [ 848.812754][ T117] usb 7-1: USB disconnect, device number 19 [ 849.616323][T15591] netlink: 'syz.6.2362': attribute type 10 has an invalid length. [ 851.418514][T14283] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 851.608856][T14283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.635885][T14283] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 851.686119][T14283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.720924][T14283] usb 2-1: config 0 descriptor?? [ 853.020057][T15641] netlink: 'syz.3.2375': attribute type 10 has an invalid length. [ 853.182072][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 853.504549][T14283] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 853.528116][T14283] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input21 [ 853.709534][T15610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.720932][T15610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.928600][T14283] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 855.101852][T14283] usb 2-1: USB disconnect, device number 57 [ 855.624878][T15673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2385'. [ 856.859500][T15696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2392'. [ 857.063507][T15705] block nbd1: shutting down sockets [ 858.450007][T15721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2399'. [ 860.132810][T15754] ip6t_rpfilter: unknown options [ 861.567676][T15761] block nbd3: shutting down sockets [ 861.858892][T15773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2410'. [ 863.151599][T15787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2415'. [ 864.217343][T15808] ip6t_rpfilter: unknown options [ 864.392212][ T5863] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 864.552135][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 864.561664][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.574075][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 864.695387][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.732511][ T5863] usb 4-1: config 0 descriptor?? [ 864.746164][ T5863] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 865.033570][ T5863] gspca_vc032x: reg_r err -32 [ 865.045003][ T5863] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 866.204436][T15826] block nbd0: shutting down sockets [ 867.951730][ T5893] usb 4-1: USB disconnect, device number 52 [ 868.030138][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 868.040163][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 868.049256][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 868.058210][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 868.065503][ T5816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 868.072645][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 868.144558][T15859] ubi1: attaching mtd0 [ 868.733932][T15861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2436'. [ 869.769284][T15873] block nbd1: shutting down sockets [ 870.004814][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.343702][T15883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2442'. [ 871.083502][ T5829] Bluetooth: hci4: command tx timeout [ 871.428319][T15853] chnl_net:caif_netlink_parms(): no params data found [ 871.827419][T15899] block nbd0: shutting down sockets [ 871.912329][T15853] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.919417][T15853] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.934140][T15853] bridge_slave_0: entered allmulticast mode [ 871.949623][T15853] bridge_slave_0: entered promiscuous mode [ 871.959404][T15853] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.973155][T15853] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.980801][T15853] bridge_slave_1: entered allmulticast mode [ 872.006549][T15853] bridge_slave_1: entered promiscuous mode [ 872.029604][T15853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.041269][T15853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.055485][ T117] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 872.095293][T15853] team0: Port device team_slave_0 added [ 872.102610][T15853] team0: Port device team_slave_1 added [ 872.119047][T15853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.126164][T15853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.152152][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.162180][T15853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.174773][T15853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.186264][T15853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.215529][T15853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.232029][ T117] usb 2-1: Using ep0 maxpacket: 8 [ 872.243285][ T117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.256200][ T117] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 872.322113][ T5893] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 872.333154][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.344946][ T117] usb 2-1: config 0 descriptor?? [ 872.353671][ T117] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 872.381464][T15853] hsr_slave_0: entered promiscuous mode [ 872.392360][T15853] hsr_slave_1: entered promiscuous mode [ 872.402168][T15853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.409791][T15853] Cannot create hsr debugfs directory [ 872.488268][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.504835][ T5893] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 872.520165][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.540226][ T5893] usb 4-1: config 0 descriptor?? [ 872.554186][ T117] gspca_vc032x: reg_r err -32 [ 872.560223][ T117] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 872.604342][T15853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.053971][ T5893] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 873.064000][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000F/input/input22 [ 873.082367][T15853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.123081][ T5829] Bluetooth: hci4: command tx timeout [ 873.164176][ T5893] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 873.205309][T15853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.258869][T15913] block nbd0: shutting down sockets [ 873.296308][T15853] bond0: (slave netdevsim0): Releasing backup interface [ 873.309655][T15905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.333531][T15905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.344571][T15853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.856644][ T5893] usb 4-1: USB disconnect, device number 53 [ 873.902825][T15853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 873.911916][T15853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 873.921099][T15853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 873.934546][T15853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 873.990665][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2453'. [ 874.143629][T15853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.169253][T15853] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.182903][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.190038][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.750160][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.757334][ T6492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.767474][ T117] usb 2-1: USB disconnect, device number 58 [ 874.872745][T15853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 875.118648][T15946] ip6t_rpfilter: unknown options [ 875.222497][ T5829] Bluetooth: hci4: command tx timeout [ 875.670122][T15853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.730174][T15853] veth0_vlan: entered promiscuous mode [ 875.811965][T15853] veth1_vlan: entered promiscuous mode [ 876.368982][T15853] veth0_macvtap: entered promiscuous mode [ 876.390309][T15853] veth1_macvtap: entered promiscuous mode [ 876.517780][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.618198][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.169168][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.204522][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.482730][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.502026][ T5829] Bluetooth: hci4: command tx timeout [ 877.508529][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.527334][T15965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2463'. [ 877.544215][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.565119][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.580047][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.621129][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.932646][T15853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.963154][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.291089][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.311877][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.325445][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.335753][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.346494][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.357030][T15853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.368152][T15853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.488219][T15980] ip6t_rpfilter: unknown options [ 879.060340][T15853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.071173][T15853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.079974][T15853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.089176][T15853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.098449][T15853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.591973][ T6245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.605984][ T6245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.650677][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.678252][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.706074][T15981] block nbd3: shutting down sockets [ 879.971064][T15996] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2466'. [ 880.772987][T16008] ip6t_rpfilter: unknown options [ 882.290815][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2477'. [ 882.325624][T16032] SET target dimension over the limit! [ 883.780009][ T5863] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 883.781156][T16056] ip6t_rpfilter: unknown options [ 884.335547][T16037] block nbd0: shutting down sockets [ 884.491898][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 884.501887][ T5863] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 884.539616][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.548291][ T5863] usb 7-1: Product: syz [ 884.557061][ T5863] usb 7-1: Manufacturer: syz [ 884.561706][ T5863] usb 7-1: SerialNumber: syz [ 884.572287][ T5863] r8152-cfgselector 7-1: Unknown version 0x0000 [ 884.578744][ T5863] r8152-cfgselector 7-1: config 0 descriptor?? [ 884.662215][T16065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2485'. [ 885.394784][ T5863] r8152-cfgselector 7-1: Unknown version 0x0000 [ 885.404804][ T5863] r8152-cfgselector 7-1: bad CDC descriptors [ 885.439654][ T5863] r8152-cfgselector 7-1: USB disconnect, device number 20 [ 886.475042][T16086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2492'. [ 887.946816][T16108] ip6t_rpfilter: unknown options [ 888.594426][T16094] block nbd0: shutting down sockets [ 891.048598][T16116] syzkaller1: entered promiscuous mode [ 891.054227][T16116] syzkaller1: entered allmulticast mode [ 891.181119][T16146] FAULT_INJECTION: forcing a failure. [ 891.181119][T16146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.195081][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.3.2506 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 891.205894][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 891.215944][T16146] Call Trace: [ 891.219207][T16146] [ 891.222134][T16146] dump_stack_lvl+0x16c/0x1f0 [ 891.226807][T16146] should_fail_ex+0x497/0x5b0 [ 891.231480][T16146] _copy_from_user+0x2e/0xd0 [ 891.236058][T16146] move_addr_to_kernel+0x68/0x160 [ 891.241069][T16146] __copy_msghdr+0x386/0x470 [ 891.245639][T16146] copy_msghdr_from_user+0xc2/0x160 [ 891.250856][T16146] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 891.256650][T16146] ___sys_sendmsg+0xff/0x1e0 [ 891.261229][T16146] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.266418][T16146] ? __pfx_lock_release+0x10/0x10 [ 891.271420][T16146] ? trace_lock_acquire+0x14e/0x1f0 [ 891.276603][T16146] ? __fget_files+0x206/0x3a0 [ 891.281265][T16146] __sys_sendmsg+0x16e/0x220 [ 891.285834][T16146] ? __pfx___sys_sendmsg+0x10/0x10 [ 891.290928][T16146] do_syscall_64+0xcd/0x250 [ 891.295417][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.301290][T16146] RIP: 0033:0x7f4664185d29 [ 891.305698][T16146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.325293][T16146] RSP: 002b:00007f4664eeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.333685][T16146] RAX: ffffffffffffffda RBX: 00007f4664375fa0 RCX: 00007f4664185d29 [ 891.341743][T16146] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 891.349747][T16146] RBP: 00007f4664eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 891.357721][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.365688][T16146] R13: 0000000000000000 R14: 00007f4664375fa0 R15: 00007fff9bc3f958 [ 891.373653][T16146] [ 891.402110][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2505'. [ 891.571575][T16154] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 892.802055][ T2143] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 893.282315][T16166] block nbd0: shutting down sockets [ 893.776234][ T2143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.820346][ T2143] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 893.877577][ T2143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.026472][ T2143] usb 2-1: config 0 descriptor?? [ 894.802223][ T2143] usbhid 2-1:0.0: can't add hid device: -71 [ 894.808258][ T2143] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 894.818085][ T2143] usb 2-1: USB disconnect, device number 59 [ 896.379617][T16209] syz.3.2521: attempt to access beyond end of device [ 896.379617][T16209] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 896.398167][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2522'. [ 896.516270][T16209] vxfs: unable to read disk superblock at 1 [ 896.525182][T16209] syz.3.2521: attempt to access beyond end of device [ 896.525182][T16209] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 896.538208][T16209] vxfs: unable to read disk superblock at 8 [ 897.141968][T16209] vxfs: can't find superblock. [ 898.544630][T16241] ubi0: attaching mtd0 [ 898.554839][T16241] ubi0: scanning is finished [ 898.967981][T16241] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 898.975618][T16241] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 898.982941][T16241] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 898.989866][T16241] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 898.999560][T16241] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 899.006424][T16241] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 899.014647][T16241] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 753636353 [ 899.024877][T16241] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 899.036898][T16242] ubi0: background thread "ubi_bgt0d" started, PID 16242 [ 900.548368][T16246] block nbd0: shutting down sockets [ 900.690937][T16265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2534'. [ 902.003182][T16270] block nbd0: shutting down sockets [ 902.727691][ T117] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 903.800420][ T117] usb 3-1: device descriptor read/all, error -71 [ 904.050492][T16299] ubi: mtd0 is already attached to ubi0 [ 905.452244][T16308] block nbd1: shutting down sockets [ 905.527754][T16323] block nbd6: shutting down sockets [ 905.669439][T16326] ip6t_rpfilter: unknown options [ 906.436367][T16304] tipc: Can't bind to reserved service type 1 [ 906.548265][T16304] 9pnet_fd: Insufficient options for proto=fd [ 906.894973][T16337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 908.002765][T16343] block nbd6: shutting down sockets [ 909.409632][T16373] sg_read: process 1802 (syz.0.2556) changed security contexts after opening file descriptor, this is not allowed. [ 911.332467][T16367] block nbd2: shutting down sockets [ 911.386201][T16392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2563'. [ 917.292745][T16432] block nbd0: shutting down sockets [ 918.209266][T16443] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2568'. [ 922.529771][ T117] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 922.538408][ T29] audit: type=1400 audit(1737201021.958:655): avc: denied { setattr } for pid=16478 comm="syz.0.2583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 923.162001][ T117] usb 4-1: Using ep0 maxpacket: 8 [ 923.216081][ T117] usb 4-1: device descriptor read/all, error -71 [ 923.376853][T16496] ip6t_rpfilter: unknown options [ 923.942014][ T25] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 924.638755][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 924.656896][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 924.687498][T16505] syz.1.2590: attempt to access beyond end of device [ 924.687498][T16505] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 924.700436][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 924.779677][T16505] vxfs: unable to read disk superblock at 1 [ 924.789811][T16505] syz.1.2590: attempt to access beyond end of device [ 924.789811][T16505] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 924.802937][T16505] vxfs: unable to read disk superblock at 8 [ 924.808858][T16505] vxfs: can't find superblock. [ 924.813757][ T25] usb 1-1: string descriptor 0 read error: -71 [ 924.820131][ T25] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=58.6f [ 924.829278][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.848526][ T25] usb 1-1: config 0 descriptor?? [ 924.855718][ T25] usb 1-1: can't set config #0, error -71 [ 924.895759][ T25] usb 1-1: USB disconnect, device number 67 [ 928.924040][T16546] block nbd3: shutting down sockets [ 929.177350][T16562] ip6t_rpfilter: unknown options [ 929.322533][T16564] syz.2.2605: attempt to access beyond end of device [ 929.322533][T16564] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 929.671115][T16564] vxfs: unable to read disk superblock at 1 [ 929.678967][T16564] syz.2.2605: attempt to access beyond end of device [ 929.678967][T16564] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 929.824558][T16572] ip6t_rpfilter: unknown options [ 930.375945][T16564] vxfs: unable to read disk superblock at 8 [ 930.382334][T16564] vxfs: can't find superblock. [ 931.448693][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.668736][T16585] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 932.451931][ T5863] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 932.768816][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.817019][ T5863] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 932.838589][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.292709][ T5863] usb 3-1: config 0 descriptor?? [ 933.943073][ T5863] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 934.310800][ T5863] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0010/input/input25 [ 934.324334][T16585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.342696][T16585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.472307][T16620] block nbd1: shutting down sockets [ 934.773059][ T5863] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 935.392451][T16626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2617'. [ 937.332802][ T5900] usb 3-1: USB disconnect, device number 38 [ 937.460213][T16646] syz.2.2627: attempt to access beyond end of device [ 937.460213][T16646] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 937.513379][T16647] ubi: mtd0 is already attached to ubi0 [ 937.956948][T16646] vxfs: unable to read disk superblock at 1 [ 938.122280][T16646] syz.2.2627: attempt to access beyond end of device [ 938.122280][T16646] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 938.424947][T16646] vxfs: unable to read disk superblock at 8 [ 938.430869][T16646] vxfs: can't find superblock. [ 942.838772][T16678] block nbd6: shutting down sockets [ 943.561669][T16700] syz.1.2641: attempt to access beyond end of device [ 943.561669][T16700] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 943.614535][T16701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2640'. [ 943.624305][T16700] vxfs: unable to read disk superblock at 1 [ 943.680921][T16700] syz.1.2641: attempt to access beyond end of device [ 943.680921][T16700] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 943.705550][T16700] vxfs: unable to read disk superblock at 8 [ 943.711514][T16700] vxfs: can't find superblock. [ 944.062622][ T117] IPVS: starting estimator thread 0... [ 944.343625][T16702] IPVS: using max 57 ests per chain, 136800 per kthread [ 947.347978][T16747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2651'. [ 947.972851][T16755] syz.3.2655: attempt to access beyond end of device [ 947.972851][T16755] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 947.985975][T16755] vxfs: unable to read disk superblock at 1 [ 947.993637][T16755] syz.3.2655: attempt to access beyond end of device [ 947.993637][T16755] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 948.008650][T16755] vxfs: unable to read disk superblock at 8 [ 948.014995][T16755] vxfs: can't find superblock. [ 948.627896][T16756] block nbd2: shutting down sockets [ 949.434615][T16771] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2660'. [ 949.588127][ T5893] IPVS: starting estimator thread 0... [ 949.702403][T16775] IPVS: using max 37 ests per chain, 88800 per kthread [ 952.966985][T16803] syz.1.2669: attempt to access beyond end of device [ 952.966985][T16803] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 953.036964][T16803] vxfs: unable to read disk superblock at 1 [ 953.046142][T16803] syz.1.2669: attempt to access beyond end of device [ 953.046142][T16803] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 953.061257][T16803] vxfs: unable to read disk superblock at 8 [ 953.440395][T16803] vxfs: can't find superblock. [ 953.548905][T16827] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2675'. [ 953.691998][ T117] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 953.990770][T16826] block nbd2: shutting down sockets [ 954.296937][T16834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 954.342096][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 954.498815][ T117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.198149][ T117] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 955.231947][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.308057][ T117] usb 1-1: config 0 descriptor?? [ 955.595429][ T117] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 955.776889][ T5900] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 956.095617][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.109463][ T5900] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 956.118677][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.141661][ T5900] usb 3-1: config 0 descriptor?? [ 956.343377][ T117] gspca_vc032x: reg_w err -110 [ 956.348293][ T117] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 956.570278][ T5900] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 956.776517][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.022430][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.036192][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input27 [ 957.387235][T14283] usb 1-1: USB disconnect, device number 68 [ 957.396216][ T5900] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 957.564043][ T5900] usb 3-1: USB disconnect, device number 39 [ 958.192110][ T5863] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 958.571185][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.584608][ T5863] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 958.593706][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.716187][T16879] block nbd0: shutting down sockets [ 958.759706][ T5863] usb 2-1: config 0 descriptor?? [ 959.157214][T16888] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2688'. [ 959.614860][ T5863] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 959.625469][ T5863] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input28 [ 959.712253][T16892] ubi: mtd0 is already attached to ubi0 [ 959.955776][T16867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.130591][ T5863] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 960.132202][T16867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.136844][ T5862] usb 2-1: USB disconnect, device number 60 [ 962.071987][ T117] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 962.392052][ T117] usb 4-1: Using ep0 maxpacket: 8 [ 962.428143][ T117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.510799][ T117] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 962.597163][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.631456][ T117] usb 4-1: config 0 descriptor?? [ 962.646970][ T117] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 963.242993][T16924] block nbd0: shutting down sockets [ 963.572141][ T117] gspca_vc032x: reg_w err -110 [ 963.608813][ T117] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 963.730739][T16937] syz.0.2702: attempt to access beyond end of device [ 963.730739][T16937] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 963.778599][T16937] vxfs: unable to read disk superblock at 1 [ 963.802041][T16937] syz.0.2702: attempt to access beyond end of device [ 963.802041][T16937] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 963.854482][T16937] vxfs: unable to read disk superblock at 8 [ 964.064615][T16937] vxfs: can't find superblock. [ 964.113270][T16942] block nbd1: shutting down sockets [ 964.246577][ T117] usb 4-1: USB disconnect, device number 56 [ 964.530982][T16952] ubi: mtd0 is already attached to ubi0 [ 965.393430][T16954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2705'. [ 969.162114][T16990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2714'. [ 969.502448][T16995] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2716'. [ 970.129985][T16998] syz.6.2717: attempt to access beyond end of device [ 970.129985][T16998] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 970.157544][T16998] vxfs: unable to read disk superblock at 1 [ 970.169705][T16998] syz.6.2717: attempt to access beyond end of device [ 970.169705][T16998] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 970.184137][T16998] vxfs: unable to read disk superblock at 8 [ 970.190100][T16998] vxfs: can't find superblock. [ 970.281986][ T25] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 970.441788][T17009] ubi: mtd0 is already attached to ubi0 [ 970.691977][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 970.703286][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.723833][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 970.812675][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.827896][ T25] usb 2-1: config 0 descriptor?? [ 970.835533][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 970.910736][T17013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2721'. [ 971.552676][ T25] gspca_vc032x: reg_w err -110 [ 971.706749][ T25] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 972.937059][ T5893] usb 2-1: USB disconnect, device number 61 [ 975.689951][T17060] ubi: mtd0 is already attached to ubi0 [ 976.042663][T17062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2734'. [ 979.181573][ T5865] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 979.541945][ T5865] usb 7-1: Using ep0 maxpacket: 8 [ 979.553393][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.564058][ T5865] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 979.598158][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.669138][ T5865] usb 7-1: config 0 descriptor?? [ 979.679497][ T5865] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 980.073487][T17107] block nbd1: shutting down sockets [ 980.417026][ T5865] gspca_vc032x: reg_w err -110 [ 980.423770][ T5865] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 980.481241][T17124] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 980.506950][T17124] bond0: (slave lo): Error: Device can not be enslaved while up [ 980.524738][T17124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38604 sclass=netlink_route_socket pid=17124 comm=syz.3.2747 [ 981.695938][ T117] usb 7-1: USB disconnect, device number 21 [ 983.755525][T17160] block nbd2: shutting down sockets [ 984.011486][T17166] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2756'. [ 987.242031][ T5863] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 987.402903][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 987.413833][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.509722][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 987.531870][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.086461][ T5863] usb 4-1: config 0 descriptor?? [ 988.093083][ T5863] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 989.341934][ T5863] gspca_vc032x: reg_w err -110 [ 989.346792][ T5863] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 989.446635][T17215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2771'. [ 990.319267][ T9] usb 4-1: USB disconnect, device number 57 [ 990.330185][T17218] block nbd6: shutting down sockets [ 991.532366][T17234] ip6t_rpfilter: unknown options [ 992.945422][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.621016][T17250] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 994.002263][ T117] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 994.870325][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.881360][ T117] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 994.891301][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.904725][ T117] usb 1-1: config 0 descriptor?? [ 996.372051][ T117] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 996.382666][ T117] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input30 [ 996.586583][T17250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.613992][T17250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.494656][ T117] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 997.802657][ T117] usb 1-1: USB disconnect, device number 69 [ 1000.656173][T17318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2798'. [ 1001.428527][T17321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2797'. [ 1003.386657][T17341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input31 [ 1004.266862][ T117] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1005.225850][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.239971][ T117] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1005.251839][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.278377][ T117] usb 2-1: config 0 descriptor?? [ 1005.875511][ T117] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1005.922953][ T117] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0014/input/input32 [ 1006.179817][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.896510][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.091982][T17373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2811'. [ 1008.074603][ T117] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1008.089994][ T117] usb 2-1: USB disconnect, device number 62 [ 1010.049339][T17397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2817'. [ 1010.799787][T17405] block nbd6: shutting down sockets [ 1011.611811][T17420] ubi: mtd0 is already attached to ubi0 [ 1015.187878][T17452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input33 [ 1015.482028][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1016.161058][ T5893] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1016.193353][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.206126][ T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1016.227717][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.413102][T17468] block nbd3: shutting down sockets [ 1016.487737][ T9] usb 7-1: config 0 descriptor?? [ 1016.497273][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 1016.932047][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.944037][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1016.954326][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.977662][ T5893] usb 3-1: config 0 descriptor?? [ 1016.985607][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1017.173720][ T9] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 1017.186694][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0015/input/input34 [ 1017.887911][ T5893] gspca_vc032x: reg_w err -110 [ 1017.941846][ T5893] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1017.948097][T17452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.982771][T17452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.132881][ T9] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1018.220838][T17487] ubi: mtd0 is already attached to ubi0 [ 1019.169800][ T9] usb 3-1: USB disconnect, device number 40 [ 1019.364603][ T5893] usb 7-1: USB disconnect, device number 22 [ 1020.381413][T17484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1020.536805][T17495] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1023.275516][T17536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1024.083970][T17545] ubi: mtd0 is already attached to ubi0 [ 1024.833443][ T5862] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1024.994773][T17555] syz.0.2854: attempt to access beyond end of device [ 1024.994773][T17555] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1025.010489][T17555] vxfs: unable to read disk superblock at 1 [ 1025.018374][T17555] syz.0.2854: attempt to access beyond end of device [ 1025.018374][T17555] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1025.036349][T17555] vxfs: unable to read disk superblock at 8 [ 1025.207914][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 1025.214173][T17555] vxfs: can't find superblock. [ 1025.214485][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.229300][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1025.239457][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.248559][ T5862] usb 3-1: config 0 descriptor?? [ 1025.881970][T17561] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2855'. [ 1026.210774][ T5862] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1027.624125][ T5862] gspca_vc032x: reg_r err -110 [ 1027.629405][ T5862] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1027.639640][ T5862] usb 3-1: USB disconnect, device number 41 [ 1027.776722][T17573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input35 [ 1028.921818][ T5893] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1029.258132][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.152288][ T5893] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1030.161415][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.173059][ T5893] usb 7-1: config 0 descriptor?? [ 1030.245085][T17599] ubi: mtd0 is already attached to ubi0 [ 1030.731445][ T5893] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1030.744969][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0016/input/input36 [ 1030.996681][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.128171][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.207091][ T5893] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1031.312034][T17608] ip6t_rpfilter: unknown options [ 1032.523217][ T5893] usb 7-1: USB disconnect, device number 23 [ 1032.664072][T17620] syz.1.2868: attempt to access beyond end of device [ 1032.664072][T17620] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1032.729432][T17620] vxfs: unable to read disk superblock at 1 [ 1032.856800][T17620] syz.1.2868: attempt to access beyond end of device [ 1032.856800][T17620] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1033.445119][T17620] vxfs: unable to read disk superblock at 8 [ 1033.451254][T17620] vxfs: can't find superblock. [ 1033.752088][ T5893] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1034.732053][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 1034.744617][ T5893] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.954431][ T5893] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1034.964056][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.702507][ T5893] usb 7-1: config 0 descriptor?? [ 1035.713471][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1036.091856][ T5893] gspca_vc032x: reg_r err -71 [ 1036.096636][ T5893] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1036.118106][ T5893] usb 7-1: USB disconnect, device number 24 [ 1036.365156][T17664] ip6t_rpfilter: unknown options [ 1036.988972][T17666] block nbd0: shutting down sockets [ 1038.247967][T17675] syz.1.2882: attempt to access beyond end of device [ 1038.247967][T17675] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1038.273785][T17675] vxfs: unable to read disk superblock at 1 [ 1038.281299][T17675] syz.1.2882: attempt to access beyond end of device [ 1038.281299][T17675] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1038.351942][T17675] vxfs: unable to read disk superblock at 8 [ 1038.357982][T17675] vxfs: can't find superblock. [ 1039.430939][T17692] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2886'. [ 1040.926331][T17707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2891'. [ 1041.031967][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1041.651847][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1041.659023][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.669432][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1041.678717][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.688586][ T9] usb 7-1: config 0 descriptor?? [ 1041.697208][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1042.212156][T17719] block nbd2: shutting down sockets [ 1042.412453][ T9] gspca_vc032x: reg_w err -110 [ 1042.417251][ T9] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 1043.256018][T17735] syz.2.2899: attempt to access beyond end of device [ 1043.256018][T17735] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1043.295899][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1043.316056][ T9] usb 7-1: USB disconnect, device number 25 [ 1043.333487][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1043.344588][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1043.352397][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1043.360768][ T5816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1043.368285][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.829616][T17735] vxfs: unable to read disk superblock at 1 [ 1044.411945][T17735] syz.2.2899: attempt to access beyond end of device [ 1044.411945][T17735] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1044.438431][T17752] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2902'. [ 1044.534675][T17736] chnl_net:caif_netlink_parms(): no params data found [ 1044.548960][T17735] vxfs: unable to read disk superblock at 8 [ 1044.862042][T17735] vxfs: can't find superblock. [ 1045.561759][T17739] Bluetooth: hci3: command tx timeout [ 1046.002509][T17736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.009686][T17736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.026452][T17736] bridge_slave_0: entered allmulticast mode [ 1046.033685][T17772] block nbd2: shutting down sockets [ 1046.039985][T17736] bridge_slave_0: entered promiscuous mode [ 1046.187839][T17736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.432914][T17736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.445014][T17736] bridge_slave_1: entered allmulticast mode [ 1046.453618][T17736] bridge_slave_1: entered promiscuous mode [ 1046.636288][ T6257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.888450][T17736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.934362][T17736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.172129][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1047.383477][ T6257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.682606][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1047.713507][T17739] Bluetooth: hci3: command tx timeout [ 1047.822466][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.832728][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1047.843084][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.909773][ T25] usb 3-1: config 0 descriptor?? [ 1047.923724][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1048.201641][T17736] team0: Port device team_slave_0 added [ 1048.230196][T17736] team0: Port device team_slave_1 added [ 1049.341131][ T25] gspca_vc032x: reg_w err -71 [ 1049.350381][ T6257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.360798][ T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1049.413225][T17736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.420257][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.446624][T17736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.459151][T17736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.466203][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.492498][T17736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.510156][ T25] usb 3-1: USB disconnect, device number 42 [ 1049.628352][ T6257] bond0: (slave netdevsim0): Releasing backup interface [ 1049.819709][ T6257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.826571][T17739] Bluetooth: hci3: command tx timeout [ 1050.102748][T17736] hsr_slave_0: entered promiscuous mode [ 1050.618697][T17736] hsr_slave_1: entered promiscuous mode [ 1050.624769][T17736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.712559][T17736] Cannot create hsr debugfs directory [ 1051.062736][T17818] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2918'. [ 1051.934769][T17739] Bluetooth: hci3: command tx timeout [ 1052.137324][T17835] block nbd2: shutting down sockets [ 1053.735537][T17857] block nbd1: shutting down sockets [ 1054.012366][T17861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input37 [ 1054.281857][ T25] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1054.362150][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.477800][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.529513][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1054.577372][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.591845][ T8319] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1054.645257][ T25] usb 3-1: config 0 descriptor?? [ 1054.795265][ T8319] usb 7-1: Using ep0 maxpacket: 8 [ 1054.803371][ T8319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.828260][ T8319] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1054.838786][ T8319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.861055][ T8319] usb 7-1: config 0 descriptor?? [ 1054.881200][ T8319] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1054.915854][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.929796][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.940907][ T6257] bond0 (unregistering): Released all slaves [ 1055.143060][ T25] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1055.274864][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0017/input/input38 [ 1055.343424][T17861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.361263][T17861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.424972][T17736] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1055.439069][T17736] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1055.461917][T17736] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1055.470578][ T25] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1055.485910][T17736] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1055.665688][T17736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.682342][ T8319] gspca_vc032x: reg_w err -110 [ 1055.687348][ T8319] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 1056.051667][ T8319] usb 3-1: USB disconnect, device number 43 [ 1056.152118][ T6257] hsr_slave_0: left promiscuous mode [ 1056.165440][ T6257] hsr_slave_1: left promiscuous mode [ 1056.178945][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.188493][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.199231][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.207315][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.267940][T17887] ip6t_rpfilter: unknown options [ 1056.792530][ T6257] veth1_macvtap: left promiscuous mode [ 1056.805067][ T6257] veth0_macvtap: left promiscuous mode [ 1056.819520][ T6257] veth1_vlan: left promiscuous mode [ 1056.880440][ T6257] veth0_vlan: left promiscuous mode [ 1056.962225][T17889] block nbd0: shutting down sockets [ 1057.644813][T17895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2935'. [ 1057.688727][ T8319] usb 7-1: USB disconnect, device number 26 [ 1061.137666][T17921] ubi: mtd0 is already attached to ubi0 [ 1062.980063][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 1063.049977][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 1063.425636][T17944] block nbd0: shutting down sockets [ 1064.198590][T17736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.240815][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.247945][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.266158][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.273326][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.283031][ T5893] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1064.419074][T17736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1064.429621][T17736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.186592][T17736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.875323][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 1065.882494][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.892737][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1065.934399][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.938696][T17971] syz.6.2952: attempt to access beyond end of device [ 1065.938696][T17971] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1065.944230][ T5893] usb 1-1: config 0 descriptor?? [ 1065.976973][T17974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2951'. [ 1066.004528][T17971] vxfs: unable to read disk superblock at 1 [ 1066.004907][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1066.020317][ T6257] IPVS: stop unused estimator thread 0... [ 1066.029026][T17971] syz.6.2952: attempt to access beyond end of device [ 1066.029026][T17971] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1066.157312][T17971] vxfs: unable to read disk superblock at 8 [ 1066.167852][T17971] vxfs: can't find superblock. [ 1066.298626][T17736] veth0_vlan: entered promiscuous mode [ 1066.309766][T17736] veth1_vlan: entered promiscuous mode [ 1066.445640][T17985] ubi: mtd0 is already attached to ubi0 [ 1067.013645][T17736] veth0_macvtap: entered promiscuous mode [ 1067.056005][T17736] veth1_macvtap: entered promiscuous mode [ 1067.130288][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.135112][ T5893] gspca_vc032x: reg_w err -110 [ 1067.145624][ T5893] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1067.177408][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.311833][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.323706][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.335701][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.346502][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.357014][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.368257][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.948817][ T5893] usb 1-1: USB disconnect, device number 70 [ 1067.970285][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.983928][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.994736][T17736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.006862][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.017394][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.027303][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.037914][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.048387][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.058860][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.068766][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.079351][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.090178][T17736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.099795][T17736] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.108571][T17736] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.117316][T17736] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.126130][T17736] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.492938][T18011] ip6t_rpfilter: unknown options [ 1069.539956][ T6245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.548498][ T6245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.604019][ T6490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.638153][ T6490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.941357][T18033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1073.147552][T18042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2966'. [ 1075.648325][T18055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2969'. [ 1075.897174][T14283] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1076.018309][T18080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2976'. [ 1076.561937][T14283] usb 7-1: Using ep0 maxpacket: 8 [ 1077.592540][T14283] usb 7-1: device descriptor read/all, error -71 [ 1078.346310][T18095] ubi: mtd0 is already attached to ubi0 [ 1078.413030][T18095] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1078.742281][T18102] syz.6.2983: attempt to access beyond end of device [ 1078.742281][T18102] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1078.761869][T18102] vxfs: unable to read disk superblock at 1 [ 1078.767941][T18102] syz.6.2983: attempt to access beyond end of device [ 1078.767941][T18102] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1078.781915][T18102] vxfs: unable to read disk superblock at 8 [ 1078.788571][T18102] vxfs: can't find superblock. [ 1080.422803][T18123] ip6t_rpfilter: unknown options [ 1081.893243][T18140] syz.2.2989: attempt to access beyond end of device [ 1081.893243][T18140] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1082.033884][T18144] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2990'. [ 1082.280974][T18140] vxfs: unable to read disk superblock at 1 [ 1082.291853][T18140] syz.2.2989: attempt to access beyond end of device [ 1082.291853][T18140] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1082.513334][T18140] vxfs: unable to read disk superblock at 8 [ 1082.519261][T18140] vxfs: can't find superblock. [ 1083.622145][T18162] ubi: mtd0 is already attached to ubi0 [ 1083.861909][ T5893] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1084.521812][T18162] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1084.986341][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 1085.008011][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.019513][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1085.031264][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.058041][ T5893] usb 1-1: config 0 descriptor?? [ 1085.078089][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1085.892035][ T5893] gspca_vc032x: reg_w err -110 [ 1085.968023][ T5893] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1086.290244][T18194] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1086.793367][T18193] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39 [ 1086.810360][ T5862] usb 1-1: USB disconnect, device number 71 [ 1087.632129][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1087.783619][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.799725][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1087.811958][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.862374][T18203] syz.6.3003: attempt to access beyond end of device [ 1087.862374][T18203] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1087.881791][T18203] vxfs: unable to read disk superblock at 1 [ 1087.888763][T18203] syz.6.3003: attempt to access beyond end of device [ 1087.888763][T18203] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1087.903306][ T9] usb 2-1: config 0 descriptor?? [ 1087.906058][T18203] vxfs: unable to read disk superblock at 8 [ 1087.922170][T18203] vxfs: can't find superblock. [ 1088.183412][T18212] block nbd7: shutting down sockets [ 1088.378731][ T9] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1088.396290][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0018/input/input40 [ 1089.277679][T18225] ubi: mtd0 is already attached to ubi0 [ 1089.478620][T18225] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1089.854379][ T9] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1089.870190][ T9] usb 2-1: USB disconnect, device number 63 [ 1089.940811][T18234] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3007'. [ 1091.734098][T18260] ip6t_rpfilter: unknown options [ 1091.927157][T18262] syz.0.3016: attempt to access beyond end of device [ 1091.927157][T18262] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1091.943262][T18262] vxfs: unable to read disk superblock at 1 [ 1091.949333][T18262] syz.0.3016: attempt to access beyond end of device [ 1091.949333][T18262] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1091.961968][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1091.969475][T18262] vxfs: unable to read disk superblock at 8 [ 1091.975649][T18262] vxfs: can't find superblock. [ 1092.181827][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1092.193075][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.203366][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1092.212612][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.228130][ T9] usb 8-1: config 0 descriptor?? [ 1093.188827][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1093.794429][T18279] ubi: mtd0 is already attached to ubi0 [ 1093.837224][T18279] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1094.282088][ T9] gspca_vc032x: reg_w err -110 [ 1094.286974][ T9] vc032x 8-1:0.0: probe with driver vc032x failed with error -110 [ 1094.287550][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1094.308349][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1094.319271][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1094.328574][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1094.488400][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1094.498476][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.510705][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 1094.731769][T18287] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 1095.076334][T18287] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1095.242086][ T25] usb 8-1: USB disconnect, device number 2 [ 1095.319561][T14635] syz_tun (unregistering): left allmulticast mode [ 1095.327931][T14635] bond0: (slave syz_tun): Releasing backup interface [ 1096.801962][ T5829] Bluetooth: hci1: command tx timeout [ 1097.067775][T18280] chnl_net:caif_netlink_parms(): no params data found [ 1097.839534][T18321] ip6t_rpfilter: unknown options [ 1097.981370][T17855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.102802][T17855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.154741][T18280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.167869][T18280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.175333][T18280] bridge_slave_0: entered allmulticast mode [ 1098.182690][T18280] bridge_slave_0: entered promiscuous mode [ 1098.389441][T17855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.131816][ T5829] Bluetooth: hci1: command tx timeout [ 1099.228835][T18340] ubi: mtd0 is already attached to ubi0 [ 1099.291548][T18340] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1099.735638][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'. [ 1099.872767][T18280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.880370][T18280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.888130][T18280] bridge_slave_1: entered allmulticast mode [ 1099.896025][T18280] bridge_slave_1: entered promiscuous mode [ 1099.919182][T18280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.264906][T17855] bond0: (slave netdevsim0): Releasing backup interface [ 1100.331225][T17855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.426193][T18280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.532965][ T5862] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1100.855408][T18280] team0: Port device team_slave_0 added [ 1100.904707][T18280] team0: Port device team_slave_1 added [ 1100.968863][T18280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.975994][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.010845][T18280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.081902][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 1101.098093][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.108688][ T5862] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1101.124070][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.144220][ T5862] usb 7-1: config 0 descriptor?? [ 1101.284875][ T5829] Bluetooth: hci1: command tx timeout [ 1101.298321][ T5862] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1101.344729][T18280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.352804][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.404529][T18280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.441135][T17855] bridge_slave_1: left allmulticast mode [ 1101.455467][T17855] bridge_slave_1: left promiscuous mode [ 1101.463503][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.506118][T17855] bridge_slave_0: left promiscuous mode [ 1101.515851][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.882416][ T5862] gspca_vc032x: reg_w err -110 [ 1101.888314][ T5862] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 1102.868328][ T5863] usb 7-1: USB disconnect, device number 29 [ 1102.879658][T17855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.892716][T17855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.909993][T17855] bond0 (unregistering): Released all slaves [ 1102.945566][T17855] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1102.957440][T17855] bond1 (unregistering): Released all slaves [ 1103.361822][ T5829] Bluetooth: hci1: command tx timeout [ 1103.479942][T17855] bond2 (unregistering): Released all slaves [ 1103.550410][T18280] hsr_slave_0: entered promiscuous mode [ 1103.564673][T18280] hsr_slave_1: entered promiscuous mode [ 1103.571096][T18280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1103.578938][T18280] Cannot create hsr debugfs directory [ 1103.665569][T18381] ip6t_rpfilter: unknown options [ 1104.643480][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3047'. [ 1106.811735][T17855] hsr_slave_0: left promiscuous mode [ 1107.172306][T17855] hsr_slave_1: left promiscuous mode [ 1107.178518][T17855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.191930][T17855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.329777][T17855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.575631][T17855] bridge_slave_0: left allmulticast mode [ 1107.587884][T17855] veth1_macvtap: left promiscuous mode [ 1107.596915][T17855] veth0_macvtap: left promiscuous mode [ 1107.611403][T17855] veth1_vlan: left promiscuous mode [ 1107.627894][T17855] veth0_vlan: left promiscuous mode [ 1108.371035][T17855] team0 (unregistering): Port device team_slave_1 removed [ 1108.622100][T17855] team0 (unregistering): Port device team_slave_0 removed [ 1109.441006][T18432] syz.7.3053: attempt to access beyond end of device [ 1109.441006][T18432] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1109.471877][T18432] vxfs: unable to read disk superblock at 1 [ 1109.478620][T18432] syz.7.3053: attempt to access beyond end of device [ 1109.478620][T18432] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1109.493136][T18432] vxfs: unable to read disk superblock at 8 [ 1109.499077][T18432] vxfs: can't find superblock. [ 1109.519276][T18435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input41 [ 1109.730089][T17855] IPVS: stop unused estimator thread 0... [ 1109.766517][T18280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1109.780209][T18280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1109.791435][T18280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1109.803371][T18280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1109.811986][ T25] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1109.905220][T18280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.935166][T18280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.959329][T17855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.966485][T17855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.976044][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.987804][ T25] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1110.019849][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.025079][T17855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.035065][T17855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.068392][ T25] usb 7-1: config 0 descriptor?? [ 1110.306338][T18280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.447448][T18450] ip6t_rpfilter: unknown options [ 1110.586595][T18280] veth0_vlan: entered promiscuous mode [ 1110.955627][ T25] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 1110.968380][T18280] veth1_vlan: entered promiscuous mode [ 1110.973050][T18435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.989978][T18435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.035581][T18280] veth0_macvtap: entered promiscuous mode [ 1111.045432][T18280] veth1_macvtap: entered promiscuous mode [ 1111.059801][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.070500][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.080706][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.102626][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.117124][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.129146][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.144392][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.156949][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.179774][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.191330][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.211480][T18280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.212964][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0019/input/input42 [ 1111.288495][T18454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3058'. [ 1112.074251][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.196853][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.299613][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.134998][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.149078][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.164726][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.174885][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.185453][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.195348][T18280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.205871][T18280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.216747][T18280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.226679][T18280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.235633][T18280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.244610][T18280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.253306][T18280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.379148][ T25] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1113.393866][ T25] usb 7-1: USB disconnect, device number 30 [ 1113.549671][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.574248][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.583141][T18471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3061'. [ 1113.593126][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.301616][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.720960][T18489] ubi: mtd0 is already attached to ubi0 [ 1114.784864][T18489] trusted_key: encrypted_key: insufficient parameters specified [ 1114.794798][T18489] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1115.282307][ T5862] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1115.393820][T18493] syz.6.3067: attempt to access beyond end of device [ 1115.393820][T18493] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1115.412112][T18493] vxfs: unable to read disk superblock at 1 [ 1115.418283][T18493] syz.6.3067: attempt to access beyond end of device [ 1115.418283][T18493] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1115.431624][T18493] vxfs: unable to read disk superblock at 8 [ 1115.437641][T18493] vxfs: can't find superblock. [ 1115.477868][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.512746][ T5862] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1115.539442][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.550687][ T5862] usb 2-1: config 0 descriptor?? [ 1115.839688][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.096969][ T5862] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 1116.120205][ T5862] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001A/input/input43 [ 1116.296791][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.321487][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.568806][T18502] netlink: 'syz.0.3069': attribute type 10 has an invalid length. [ 1117.556107][ T5862] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1117.584656][ T5862] usb 2-1: USB disconnect, device number 64 [ 1118.649611][T18520] ip6t_rpfilter: unknown options [ 1120.242259][T18541] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3080'. [ 1121.240005][T18557] netlink: 'syz.7.3082': attribute type 10 has an invalid length. [ 1121.692458][T18557] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1122.205904][T18571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3085'. [ 1123.953772][T18577] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input44 [ 1125.489625][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1126.656920][T18603] ubi: mtd0 is already attached to ubi0 [ 1126.968770][T18602] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1127.288587][ T25] usb 8-1: device not accepting address 3, error -71 [ 1127.900176][T17739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1127.915119][T17739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1127.925311][T17739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1127.936507][T17739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1127.944281][T17739] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1127.954130][T17739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1128.424338][T18628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1129.461922][T18616] chnl_net:caif_netlink_parms(): no params data found [ 1130.436389][T17739] Bluetooth: hci0: command tx timeout [ 1130.492353][T18616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.499801][T18616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.507167][T18616] bridge_slave_0: entered allmulticast mode [ 1130.532399][T18616] bridge_slave_0: entered promiscuous mode [ 1130.569345][T18616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.688203][T18616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.696992][T18616] bridge_slave_1: entered allmulticast mode [ 1130.709127][T18616] bridge_slave_1: entered promiscuous mode [ 1130.739472][T18616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.753319][T18616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.798008][T18616] team0: Port device team_slave_0 added [ 1130.815468][T18616] team0: Port device team_slave_1 added [ 1130.906654][T18616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.921263][T18616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.949677][ T117] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1130.972466][T18616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.999187][T18616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.007007][T18616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.035937][T18616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.099242][T18616] hsr_slave_0: entered promiscuous mode [ 1131.108064][T18616] hsr_slave_1: entered promiscuous mode [ 1131.118524][T18616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1131.128325][T18616] Cannot create hsr debugfs directory [ 1131.138093][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.149147][ T117] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1131.162066][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.188718][ T117] usb 2-1: config 0 descriptor?? [ 1131.493576][T18616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.523827][T18657] syz.7.3107: attempt to access beyond end of device [ 1131.523827][T18657] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1131.589492][T18657] vxfs: unable to read disk superblock at 1 [ 1131.628815][T18657] syz.7.3107: attempt to access beyond end of device [ 1131.628815][T18657] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1131.630390][T18653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.662872][T18653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.727697][T18657] vxfs: unable to read disk superblock at 8 [ 1131.759432][T18657] vxfs: can't find superblock. [ 1131.951040][T18616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.108994][T18616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.300432][T18616] bond0: (slave netdevsim0): Releasing backup interface [ 1132.374187][T18616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.482352][T17739] Bluetooth: hci0: command tx timeout [ 1132.798909][T18616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1132.824575][T18616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1132.844260][T18616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1132.855195][T18616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1132.970506][T18616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.052500][T18616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.092131][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.099330][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.171128][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.178345][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.369789][T18680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3112'. [ 1133.953486][ T117] usbhid 2-1:0.0: can't add hid device: -71 [ 1133.962203][ T117] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1133.971646][ T117] usb 2-1: USB disconnect, device number 65 [ 1134.189074][T18689] ip6t_rpfilter: unknown options [ 1134.567909][T17739] Bluetooth: hci0: command tx timeout [ 1135.020732][T18616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.079684][T18616] veth0_vlan: entered promiscuous mode [ 1135.096732][T18616] veth1_vlan: entered promiscuous mode [ 1135.130787][T18616] veth0_macvtap: entered promiscuous mode [ 1135.864327][T18616] veth1_macvtap: entered promiscuous mode [ 1136.292804][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.314605][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.332349][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.342855][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.352706][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.363467][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.373334][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.384383][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.394578][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.405060][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.414884][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.425393][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.436872][T18616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.670318][T17739] Bluetooth: hci0: command tx timeout [ 1137.167446][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.589330][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.639370][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.762136][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.772074][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.782695][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.816482][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.866417][T18722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1138.325557][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.336399][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.347158][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.363307][T18616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.374009][T18616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.388872][T18616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.419753][T18616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.430187][T18616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.520765][T18616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.530175][T18616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.001593][T18727] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input45 [ 1139.060860][T10152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.068902][T10152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.254400][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.267592][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.859093][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1139.866797][T14283] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1140.125310][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.125412][T14283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.147334][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1140.156456][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.164846][T14283] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1140.177516][T14283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.341301][T14283] usb 2-1: config 0 descriptor?? [ 1140.350474][ T25] usb 3-1: config 0 descriptor?? [ 1140.374995][ T5893] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1140.831785][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 1140.838261][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.849652][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1140.864038][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.882842][ T5893] usb 1-1: config 0 descriptor?? [ 1140.891271][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1140.916872][ T25] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 1140.927326][T18727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.927937][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input46 [ 1140.952022][T18727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.245596][ T25] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1141.247260][T18729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.283188][T18729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.329664][T18749] ubi: mtd0 is already attached to ubi0 [ 1141.776437][ T5893] gspca_vc032x: reg_w err -110 [ 1141.781294][ T5893] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1142.578996][T14283] usbhid 2-1:0.0: can't add hid device: -71 [ 1142.585145][T14283] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1142.593450][T18762] ip6t_rpfilter: unknown options [ 1142.608138][T14283] usb 2-1: USB disconnect, device number 66 [ 1142.660946][ T5862] usb 3-1: USB disconnect, device number 44 [ 1142.785382][ T5893] usb 1-1: USB disconnect, device number 72 [ 1145.204278][T18790] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1145.824840][T18799] ubi: mtd0 is already attached to ubi0 [ 1147.251886][ T5893] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1148.025898][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.037981][ T5893] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1148.084059][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.193309][ T5893] usb 7-1: config 0 descriptor?? [ 1148.717198][T18805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.743427][T18805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.946623][T18827] ip6t_rpfilter: unknown options [ 1149.656181][T18830] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3151'. [ 1149.782710][T18833] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3152'. [ 1149.833761][ T117] IPVS: starting estimator thread 0... [ 1149.995255][T18834] IPVS: using max 31 ests per chain, 74400 per kthread [ 1150.192057][ T5893] usbhid 7-1:0.0: can't add hid device: -71 [ 1150.199435][ T5893] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1150.232421][ T5893] usb 7-1: USB disconnect, device number 31 [ 1153.464602][T18876] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input47 [ 1154.291231][ T5893] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1154.575503][T18891] ubi: mtd0 is already attached to ubi0 [ 1155.317681][T18891] trusted_key: encrypted_key: insufficient parameters specified [ 1155.419566][T18891] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1155.694111][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.705383][ T5893] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1155.714539][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.234637][T18901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3170'. [ 1156.249442][ T5893] usb 2-1: config 0 descriptor?? [ 1157.102003][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 1157.114123][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1157.138712][ T5893] usb 2-1: USB disconnect, device number 67 [ 1158.608084][T18934] ip6t_rpfilter: unknown options [ 1164.078563][T17739] Bluetooth: hci4: command 0x0406 tx timeout [ 1165.087989][T19006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3204'. [ 1168.844568][T19055] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3217'. [ 1172.281629][T19087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input48 [ 1172.613656][T19094] ubi: mtd0 is already attached to ubi0 [ 1173.112056][ T5893] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1173.240538][T19100] ip6t_rpfilter: unknown options [ 1173.856181][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.867600][ T5893] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1173.877324][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.886817][ T5893] usb 3-1: config 0 descriptor?? [ 1174.546885][T19087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.557386][T19087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.698669][T19114] syz.0.3236: attempt to access beyond end of device [ 1174.698669][T19114] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1174.711705][T19114] vxfs: unable to read disk superblock at 1 [ 1174.718398][T19114] syz.0.3236: attempt to access beyond end of device [ 1174.718398][T19114] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1174.737857][T19114] vxfs: unable to read disk superblock at 8 [ 1174.744096][T19114] vxfs: can't find superblock. [ 1176.116295][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 1176.128642][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1176.165325][ T5893] usb 3-1: USB disconnect, device number 45 [ 1177.212967][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.222388][T19137] ubi: mtd0 is already attached to ubi0 [ 1177.934445][T19151] ip6t_rpfilter: unknown options [ 1178.618452][T19155] syz.0.3249: attempt to access beyond end of device [ 1178.618452][T19155] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1178.634491][T19155] vxfs: unable to read disk superblock at 1 [ 1178.640609][T19155] syz.0.3249: attempt to access beyond end of device [ 1178.640609][T19155] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1179.355001][T19155] vxfs: unable to read disk superblock at 8 [ 1179.361029][T19155] vxfs: can't find superblock. [ 1180.191352][ T25] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1180.362096][ T25] usb 7-1: device descriptor read/64, error -71 [ 1180.631991][ T25] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1181.038056][T19194] ubi: mtd0 is already attached to ubi0 [ 1182.226659][T19202] ip6t_rpfilter: unknown options [ 1182.498969][ T25] usb 7-1: device descriptor read/64, error -71 [ 1182.639415][ T25] usb usb7-port1: attempt power cycle [ 1183.062182][ T25] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1183.340079][T19216] vxfs: WRONG superblock magic 00000000 at 1 [ 1183.346497][T19216] vxfs: WRONG superblock magic 00000000 at 8 [ 1183.352557][T19216] vxfs: can't find superblock. [ 1183.497872][T19218] nfs: Unknown parameter 'ntext' [ 1183.614553][ T29] audit: type=1400 audit(1737201283.438:656): avc: denied { connect } for pid=19215 comm="syz.6.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1183.747045][ T25] usb 7-1: device descriptor read/8, error -71 [ 1183.864095][T19225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3265'. [ 1183.870554][ T29] audit: type=1400 audit(1737201283.658:657): avc: denied { execmem } for pid=19221 comm="syz.2.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1183.925916][T19219] syz.7.3266: attempt to access beyond end of device [ 1183.925916][T19219] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1183.940554][ T9] IPVS: starting estimator thread 0... [ 1183.946385][T19219] vxfs: unable to read disk superblock at 1 [ 1183.952499][T19219] syz.7.3266: attempt to access beyond end of device [ 1183.952499][T19219] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1184.265826][T19219] vxfs: unable to read disk superblock at 8 [ 1184.274869][T19219] vxfs: can't find superblock. [ 1184.302228][T19226] IPVS: using max 57 ests per chain, 136800 per kthread [ 1187.067184][T19262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3279'. [ 1187.894370][T19269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1190.495022][T19307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input49 [ 1191.166484][T19313] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1191.741998][T19325] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3296'. [ 1192.124252][ T8319] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1192.502151][ T8319] usb 2-1: device descriptor read/64, error -71 [ 1192.811148][T19337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1192.971820][ T8319] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1193.681895][ T8319] usb 2-1: device descriptor read/64, error -71 [ 1193.880581][ T8319] usb usb2-port1: attempt power cycle [ 1194.815774][T19361] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3309'. [ 1196.876998][T19379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3311'. [ 1197.568617][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1197.729371][ T9] usb 1-1: device descriptor read/64, error -71 [ 1198.006854][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1198.277181][ T9] usb 1-1: device descriptor read/64, error -71 [ 1198.324825][T19391] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3316'. [ 1198.726279][ T9] usb usb1-port1: attempt power cycle [ 1199.083535][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1199.113082][ T9] usb 1-1: device descriptor read/8, error -71 [ 1199.556756][T19408] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3321'. [ 1199.566027][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1199.750204][ T9] usb 1-1: device descriptor read/8, error -71 [ 1200.636006][ T9] usb usb1-port1: unable to enumerate USB device [ 1202.793253][T19444] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3329'. [ 1203.745652][T19455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input50 [ 1204.131786][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1204.257086][T19464] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3337'. [ 1204.293276][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.346427][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1204.365450][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.450142][ T9] usb 2-1: config 0 descriptor?? [ 1205.725206][ T9] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 1205.735958][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001C/input/input51 [ 1205.817800][ T9] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1205.931504][T19455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.957842][T19455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.416219][ T29] audit: type=1400 audit(1737201306.298:658): avc: denied { create } for pid=19454 comm="syz.1.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1206.439008][T14283] usb 2-1: USB disconnect, device number 71 [ 1207.817351][T19491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1209.290575][T19507] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1210.831975][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1211.337397][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.348705][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1211.358176][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.378369][ T9] usb 2-1: config 0 descriptor?? [ 1211.675537][T19534] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1211.943837][ T9] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 1211.955860][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001D/input/input52 [ 1212.024570][ T9] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1212.167317][T19520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.230239][T19520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.584794][ T9] [ 1212.584802][ T9] ====================================================== [ 1212.584806][ T9] WARNING: possible circular locking dependency detected [ 1212.584811][ T9] 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 Not tainted [ 1212.584818][ T9] ------------------------------------------------------ [ 1212.584821][ T9] kworker/0:1/9 is trying to acquire lock: [ 1212.584827][ T9] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 1212.584857][ T9] [ 1212.584857][ T9] but task is already holding lock: [ 1212.584860][ T9] ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 1212.584883][ T9] [ 1212.584883][ T9] which lock already depends on the new lock. [ 1212.584883][ T9] [ 1212.584887][ T9] [ 1212.584887][ T9] the existing dependency chain (in reverse order) is: [ 1212.584890][ T9] [ 1212.584890][ T9] -> #2 (console_lock){+.+.}-{0:0}: [ 1212.584903][ T9] console_lock+0x7a/0xa0 [ 1212.584916][ T9] con_flush_chars+0x5e/0x80 [ 1212.584929][ T9] n_tty_write+0xe17/0x1140 [ 1212.584940][ T9] file_tty_write.constprop.0+0x506/0x9a0 [ 1212.584949][ T9] vfs_write+0x5ae/0x1150 [ 1212.584959][ T9] ksys_write+0x12b/0x250 [ 1212.584967][ T9] do_syscall_64+0xcd/0x250 [ 1212.584981][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.584994][ T9] [ 1212.584994][ T9] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 1212.585008][ T9] down_write+0x93/0x200 [ 1212.585021][ T9] n_tty_flush_buffer+0x25/0x1b0 [ 1212.585031][ T9] tty_buffer_flush+0x236/0x310 [ 1212.585039][ T9] tty_ldisc_flush+0x64/0xe0 [ 1212.585051][ T9] vt_ioctl+0x11f6/0x2f80 [ 1212.585062][ T9] tty_ioctl+0x651/0x15d0 [ 1212.585070][ T9] __x64_sys_ioctl+0x190/0x200 [ 1212.585083][ T9] do_syscall_64+0xcd/0x250 [ 1212.585094][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.585106][ T9] [ 1212.585106][ T9] -> #0 (&buf->lock){+.+.}-{4:4}: [ 1212.585119][ T9] __lock_acquire+0x249e/0x3c40 [ 1212.585129][ T9] lock_acquire.part.0+0x11b/0x380 [ 1212.585138][ T9] __mutex_lock+0x19b/0xa60 [ 1212.585150][ T9] tty_buffer_flush+0x72/0x310 [ 1212.585158][ T9] tty_ldisc_flush+0x64/0xe0 [ 1212.585170][ T9] __do_SAK+0x6a1/0x800 [ 1212.585178][ T9] vc_SAK+0x7f/0x310 [ 1212.585188][ T9] process_one_work+0x9c5/0x1ba0 [ 1212.585199][ T9] worker_thread+0x6c8/0xf00 [ 1212.585208][ T9] kthread+0x2c1/0x3a0 [ 1212.585220][ T9] ret_from_fork+0x45/0x80 [ 1212.585229][ T9] ret_from_fork_asm+0x1a/0x30 [ 1212.585243][ T9] [ 1212.585243][ T9] other info that might help us debug this: [ 1212.585243][ T9] [ 1212.585246][ T9] Chain exists of: [ 1212.585246][ T9] &buf->lock --> &tty->termios_rwsem --> console_lock [ 1212.585246][ T9] [ 1212.585261][ T9] Possible unsafe locking scenario: [ 1212.585261][ T9] [ 1212.585263][ T9] CPU0 CPU1 [ 1212.585266][ T9] ---- ---- [ 1212.585268][ T9] lock(console_lock); [ 1212.585274][ T9] lock(&tty->termios_rwsem); [ 1212.585281][ T9] lock(console_lock); [ 1212.585288][ T9] lock(&buf->lock); [ 1212.585294][ T9] [ 1212.585294][ T9] *** DEADLOCK *** [ 1212.585294][ T9] [ 1212.585296][ T9] 4 locks held by kworker/0:1/9: [ 1212.585302][ T9] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1212.585325][ T9] #1: ffffc900000e7d80 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1212.585349][ T9] #2: ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 1212.585372][ T9] #3: ffff88807902f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 1212.585398][ T9] [ 1212.585398][ T9] stack backtrace: [ 1212.585401][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1212.585412][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1212.585419][ T9] Workqueue: events vc_SAK [ 1212.585431][ T9] Call Trace: [ 1212.585435][ T9] [ 1212.585439][ T9] dump_stack_lvl+0x116/0x1f0 [ 1212.585453][ T9] print_circular_bug+0x419/0x5d0 [ 1212.585463][ T9] check_noncircular+0x31a/0x400 [ 1212.585473][ T9] ? __pfx_check_noncircular+0x10/0x10 [ 1212.585490][ T9] ? lockdep_lock+0xc6/0x200 [ 1212.585504][ T9] ? __pfx_lockdep_lock+0x10/0x10 [ 1212.585518][ T9] __lock_acquire+0x249e/0x3c40 [ 1212.585530][ T9] ? __pfx___lock_acquire+0x10/0x10 [ 1212.585542][ T9] lock_acquire.part.0+0x11b/0x380 [ 1212.585552][ T9] ? tty_buffer_flush+0x72/0x310 [ 1212.585561][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1212.585572][ T9] ? rcu_is_watching+0x12/0xc0 [ 1212.585585][ T9] ? trace_lock_acquire+0x14e/0x1f0 [ 1212.585599][ T9] ? __pfx___lock_acquire+0x10/0x10 [ 1212.585609][ T9] ? tty_buffer_flush+0x72/0x310 [ 1212.585618][ T9] ? lock_acquire+0x2f/0xb0 [ 1212.585627][ T9] ? tty_buffer_flush+0x72/0x310 [ 1212.585637][ T9] __mutex_lock+0x19b/0xa60 [ 1212.585649][ T9] ? tty_buffer_flush+0x72/0x310 [ 1212.585658][ T9] ? tty_buffer_flush+0x72/0x310 [ 1212.585666][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1212.585677][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 1212.585689][ T9] ? trace_lock_acquire+0x14e/0x1f0 [ 1212.585703][ T9] ? mark_held_locks+0x9f/0xe0 [ 1212.585713][ T9] ? tty_ldisc_flush+0x1c/0xe0 [ 1212.585726][ T9] ? ldsem_down_read_trylock+0x11b/0x180 [ 1212.585738][ T9] ? tty_buffer_flush+0x72/0x310 [ 1212.585747][ T9] tty_buffer_flush+0x72/0x310 [ 1212.585756][ T9] tty_ldisc_flush+0x64/0xe0 [ 1212.585769][ T9] __do_SAK+0x6a1/0x800 [ 1212.585778][ T9] ? lock_acquire+0x2f/0xb0 [ 1212.585788][ T9] ? vc_SAK+0x13/0x310 [ 1212.585800][ T9] vc_SAK+0x7f/0x310 [ 1212.585811][ T9] process_one_work+0x9c5/0x1ba0 [ 1212.585823][ T9] ? __pfx_console_callback+0x10/0x10 [ 1212.585833][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1212.585843][ T9] ? rcu_is_watching+0x12/0xc0 [ 1212.585856][ T9] ? assign_work+0x1a0/0x250 [ 1212.585866][ T9] worker_thread+0x6c8/0xf00 [ 1212.585878][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1212.585888][ T9] kthread+0x2c1/0x3a0 [ 1212.585899][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1212.585910][ T9] ? __pfx_kthread+0x10/0x10 [ 1212.585923][ T9] ret_from_fork+0x45/0x80 [ 1212.585932][ T9] ? __pfx_kthread+0x10/0x10 [ 1212.585944][ T9] ret_from_fork_asm+0x1a/0x30 [ 1212.585959][ T9] [ 1212.586753][ T9] tty tty1: SAK: killed process 19543 (syz.0.3361): by fd#3 [ 1212.586775][ T9] tty tty1: SAK: killed process 19544 (syz.0.3361): by fd#3 [ 1213.477459][T14283] usb 2-1: USB disconnect, device number 72 [ 1220.251802][ T5829] Bluetooth: hci3: command 0x0406 tx timeout