last executing test programs: 7m4.476870285s ago: executing program 3 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x20000000, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 7m4.358539615s ago: executing program 3 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff030768045e207a1509cf36b9", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m4.18874099s ago: executing program 3 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7m4.003077117s ago: executing program 3 (id=1364): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7m3.707068703s ago: executing program 3 (id=1368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x0, 0x1, 0x0, {0x9, 0x0, 0x7ff, 0xf800, 0xce}, {0x0, 0x1, 0x8, 0xa, 0x1ff}, 0x6, 0x80000001, 0x3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f0000000440)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 7m3.166819731s ago: executing program 3 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 7m2.829439251s ago: executing program 32 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 9.216789599s ago: executing program 0 (id=3481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa7e}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}], 0x5}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x62, "3dc3a18f60a038927bd526b8e8bd8ebc207869bb830be27d3d0d6bbcd9316dcd74e1d3b550d8f3888d704fe61fd9a4f20c6c1c78f3a33f8cf84e8c5df2984b5e0ba2f0ecfc8245f6f298ac4b221425630b0163e529c9ae3195ce5d3000066a1592e6"}, &(0x7f0000000700)=0x6a) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.042037235s ago: executing program 0 (id=3485): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000600)}, {&(0x7f00000006c0)}, {0x0}], 0x4}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.852188911s ago: executing program 0 (id=3487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setreuid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 8.746252521s ago: executing program 1 (id=3489): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000200)={0x0, 0xf}, 0x0, 0x0}) 7.228098266s ago: executing program 0 (id=3492): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000010c0)={0x2c, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.899760494s ago: executing program 1 (id=3501): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x62, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f12", 0x23}, {&(0x7f00000006c0)}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.70925026s ago: executing program 2 (id=3504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="56c355abbfb25656ae8a254adbc339dc171b30490a7ad42beee1cc68f78a8385a4fb8d437f96cb58b8d6a6726c0e7430596065733ec05015e505f57e964a01cab2df588439b0802434212b9f81c24fad954d423a80dda784c4d408490a47e6cfb048f5", 0x63}, {&(0x7f0000000180)="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", 0x14b}], 0x2}}], 0x2, 0x20000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x3) 4.562549054s ago: executing program 1 (id=3506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa7e}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}], 0x5}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x62, "3dc3a18f60a038927bd526b8e8bd8ebc207869bb830be27d3d0d6bbcd9316dcd74e1d3b550d8f3888d704fe61fd9a4f20c6c1c78f3a33f8cf84e8c5df2984b5e0ba2f0ecfc8245f6f298ac4b221425630b0163e529c9ae3195ce5d3000066a1592e6"}, &(0x7f0000000700)=0x6a) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.27309041s ago: executing program 1 (id=3510): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xb0, 0x29, 0x36, {0x5e, 0x12, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x39, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x160}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.227702843s ago: executing program 2 (id=3511): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x19, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x198}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b", 0xb7}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.220797234s ago: executing program 5 (id=3512): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f0000000080)={&(0x7f0000000240)=""/135, 0x87, 0x0, &(0x7f0000000380)=""/252, 0xfc}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x2014444, &(0x7f0000001e00)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@noadinicb}, {@adinicb}, {@uid_forget}, {@uid}, {@umask={'umask', 0x3d, 0x2}}, {@unhide}, {@gid}, {@nostrict}]}, 0xfe, 0xc22, &(0x7f00000011c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff86dd632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) 4.106986754s ago: executing program 4 (id=3513): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xb0}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.81465949s ago: executing program 4 (id=3514): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x53f}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112", 0x2b}], 0x4}, 0x800) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000740)={0x0, 0x0, 0xff, 0x4}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3.780752263s ago: executing program 5 (id=3515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) getdents(r3, &(0x7f0000000280)=""/4096, 0x9005) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20000000000000000000f800002000000600"/28], 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000001580)) accept4$netrom(r3, &(0x7f0000001440)={{0x3, @bcast}, [@remote, @bcast, @rose, @rose, @remote, @rose, @bcast, @bcast]}, &(0x7f00000014c0)=0x48, 0x80000) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r5, 0x60}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000008fe9ada631e8c000"/27, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000ffffffffdbaaf0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b7000000000000009500000000000000b8b7a4b29d6ea8128af7501664dfe83ccb5269fc52189e31d284f0ca75ceb3a4f9a2fb413261fb57ae42884f3b977d4094319a16f094e05439260bc4e6aabd3cf29413abc5057d0bdee9eab042f8d652a20b9e091afd6d6f5cbdee28beb1689bc8d7215eefc31c7f83a9b677ecb73976cfa10329238b260138eb4199ae2b1067194c283dc3973ad35a1e5ac1ee2866f5c50dd1980d3f7fdd1d85c5ea0542e6f706122d1930a25444ada7b3e682db1874876bcd819f399eccdd98deb234345a30727c7aabe559b28fd3170e38"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.70302667s ago: executing program 0 (id=3516): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbddffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r4, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) r5 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f00000002c0)={0x20, 0x23, 0x78, {0x78, 0x23, "ab79a5a7fc46b920db815d6ebe03a74ca4ac0da833339597240e383446c2fb99e589f4dd41eb7d5bdf9c9db1e766b33b00aad01e6990900581a19c6ed03edc966d64f4dd8ae2c38adfe8d4f02db0227e8a03a9a5abe4ebeb1b91165b93a820dbad86d0bb2cfbe442638ee5345ed741b90daad76a576f"}}, &(0x7f0000000100)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "af54a34a6ccfb57812cb391892ff30c0906146c946f2aa17fa5536ddd86faa782bec82ece1ee737deed2a66f2b"}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x0, 0xf, 0xe5, "d2d9597523e104bfa922276e617405f837103f3a4d3413f24a862975ae8ed99b5c79c89d6b1d1a36816dd41eb1b19f76043205c565c8deecf00d80e514e950af0cae0cc7ab80b7b1a6dc45b1212ef6ac1e83cae9f1ee15d29f29456fd3a90d9315cfe87eb64cba1d2fa4f8ce3644cf0b269478b2e7f78da2d211ee4b496031d4f4bcdd76e7bba12937cda845c34766af0145a73b9fe46e8889344ee733cb2f721cc245af62ca0aeeaae7ae6e85ff0400ab74713f3109525480df2b6bc1237d9cc2241966ee595687134ecdac7a7c0c312df69af65010573cfcfe3e46824f2449fcf29d5719"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x89}, &(0x7f00000003c0)={0xc0, 0x5, 0x3, "57836c"}, &(0x7f0000000540)={0x40, 0x5, 0x3, "0e7af7"}}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) 2.981507414s ago: executing program 2 (id=3517): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "ec28a144f13d7607"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r1, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d", 0xc}, {0x0}, {0x0}], 0x5}, 0x800) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 2.968410455s ago: executing program 4 (id=3518): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x801) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=0xffffffffffffffff], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) fcntl$setstatus(r4, 0x4, 0x45800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="d40ea28eae2ba6e5fa0fcf4f10ba485a7a", @ANYRES32=r2, @ANYRESHEX=0x0, @ANYRESHEX=r5], 0x0) 2.966773365s ago: executing program 1 (id=3519): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000600)}, {&(0x7f00000006c0)}, {0x0}], 0x4}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.821358409s ago: executing program 5 (id=3520): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = userfaultfd(0x80801) socket$inet(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r3, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200283a00cfb68bd70000000000000000001f0001fe8000000000020000"], 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x300, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet(0x2, 0x802, 0x1) write(r5, &(0x7f0000000440)="08008edf773c80", 0x7) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) 2.798821891s ago: executing program 1 (id=3521): sendmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000003b00)}}], 0x4000033, 0x20004041) r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f0000000680)={0x40000400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0, {0x2a}, &(0x7f0000000540)=""/221, 0xdd, &(0x7f00000004c0)=""/27, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x7, {r0}}, 0x58) r3 = getpgrp(r2) syz_clone3(&(0x7f00000002c0)={0x201900400, &(0x7f00000001c0), &(0x7f0000000040)=0x0, &(0x7f00000000c0), {0xd}, &(0x7f0000000180)=""/11, 0xb, &(0x7f0000000740)=""/135, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r3, r3, r2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r1, r1, r2, r1], 0xc, {r0}}, 0x58) capset(&(0x7f0000000340)={0x20071026, r4}, &(0x7f0000000380)={0x5, 0xe0, 0x7fffffff, 0x5, 0x8, 0x6}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x759a82, 0x2) sendfile(r5, r5, 0x0, 0x30) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x4, 0x4) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000003c0)={[{@nobh}, {@jqfmt_vfsv0}, {@nodelalloc}]}, 0x3, 0x4f8, &(0x7f0000000800)="$eJzs3E1sFGUfAPD/bLv9gBfoy8vL+4IoBTQ2JrZQUDiYGExMPGhixIMcm1IJUsDQHoQQKYnBM4lXQzwab5p41aPxZOIVDx5MDJEYLnwkJmNmd6Yf+9UuXVrL/n7Jdp9n5pl5nv/MPLOz83QngK41nP1JIv4VEbciYls1u7TAcPXt/t0rkw/uXpmMuTQ98WdSKXcvy+eK5TbnmZFSROmTpGaFVTOXLp+dmJ6eupjnx2bPfTg2c+nyi2fOTZyeOj11fvzYsSOHDx19efyl9oNqUF8W173dH1/Ys+uNkzfemuwtpg/k74vjaKq3vWYMt5j3XHur+sfbsiid1G+nq2vaGFZsID+sy1n/vzK9/+R6NwhYM2mapv3NZ8+lta7VTQE2rCTWuwXA+ig+6LPvv/fullf2PfgJcud49gUoqcR9P39V5/RGKS9Trvl+20nDEfHe3MObg/HwZrS6D/HrY2oAANB1vj9eXAlm13/VV3VOKXYuKrc1H0MZioh/R8T2iPhPROyIiP9GVMr+LyL+X1tBEpG2qH9HTX6h/m/yUYTS7VUH2UJ2/fdKPra19PqvuPqLoZ48tyWiuGCeOphvk5Eo979/ZnrqUJP19y1Tf3H9V7yy+rP3hRKl2701N+hOTcxOPFq09e5ci9jdWxt/0pvtuGIYJ4mIXRGxu431Di1Kn3nhyz3zmfLScsvHX5E2GNJrezyukfSLiOer+38uluz/hRqT1uOTYwMxPXVwLDsKDjas48efrr/drP5l4//2t9pFXj/63YnVhj0v2/+bqvGXI4+9Mn67EP9QEpHMj9fORKQ97dVx/ZdPK+sdPlA/7xGO/76YmJ3oS97NM1UfTczOXjwU0Ze8WT99fGHhIl+Uz+IfOdC4/2/Pl8m2xFMRkR3ET0fEMxGxN2/7vojYHxH1of38R5H64bVnP2i2bZbGv7XZ8T8/Tt1pWfynGp7/luz/hfH6FSaKhbMpPWf33XrQ5OSxsv1/pJIayac0Pv8lS04RK23p6rYeAAAAbAylqPzvf2l0Pl0qjY5W7wHtiE2l6Qszs3sj4vyp6m8EhqJcKu50Ve8Hl5Pi/ufQovx4Tf5wft/4s57BSn508sJyt0aBx2xzpc8ndf0/83ub93mBDagD42jABrVc/995Y40aAqw5n//QvRb1/7kmReb8pww8mXz+Q/dq1P+vxlctB+icM2DjS/Vl6Gr6P3Sv3nhnPl352XPDX9sCTyKf/9CV2v1df3uJtH966tWIqJ01UDfl0uUYeDzNGGxQ17oksiurDq6wHBErKzz4KFUUl4DNn/BQam+F/VE/qydaLZW0fI7DX2ma1s/Ktsqy7Tm9s+MHf/FMlE4fNl8v9NNy5SFL87M+37aCSFeRWJfTEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMf9HQAA//8V1NEi") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x100, 0x1) getdents64(r8, 0x0, 0x4f) r9 = socket$inet6(0xa, 0x80000, 0x80000001) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x10010, r7, 0x95bbc000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f0000000140)='\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000d00)) close_range(r7, r7, 0x0) 2.287034446s ago: executing program 2 (id=3522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="56c355abbfb25656ae8a254adbc339dc171b30490a7ad42beee1cc68f78a8385a4fb8d437f96cb58b8d6a6726c0e7430596065733ec05015e505f57e964a01cab2df588439b0802434212b9f81c24fad954d423a80dda784c4d408490a47e6cfb048f5", 0x63}, {&(0x7f0000000180)="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", 0x14b}], 0x2}}], 0x2, 0x20000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x3) 2.140981529s ago: executing program 4 (id=3523): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.500441786s ago: executing program 2 (id=3524): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRES8, @ANYRES8=r0, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) poll(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc) 1.01547219s ago: executing program 5 (id=3525): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f0000000080)={&(0x7f0000000240)=""/135, 0x87, 0x0, &(0x7f0000000380)=""/252, 0xfc}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x2014444, &(0x7f0000001e00)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@noadinicb}, {@adinicb}, {@uid_forget}, {@uid}, {@umask={'umask', 0x3d, 0x2}}, {@unhide}, {@gid}, {@nostrict}]}, 0xfe, 0xc22, &(0x7f00000011c0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff86dd632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) 993.657501ms ago: executing program 4 (id=3526): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 768.730521ms ago: executing program 5 (id=3527): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x4}]}, 0x10) futex(0x0, 0x86, 0x4000002, 0x0, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0xff80, 0x1, 0x1000f06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4$alg(r4, 0x0, 0x0, 0x800) 698.674818ms ago: executing program 2 (id=3528): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x53f}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112", 0x2b}], 0x4}, 0x800) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000740)={0x0, 0x0, 0xff, 0x4}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 697.767018ms ago: executing program 4 (id=3529): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x19, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x198}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b", 0xb7}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 226.24975ms ago: executing program 0 (id=3530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) getdents(r3, &(0x7f0000000280)=""/4096, 0x9005) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20000000000000000000f800002000000600"/28], 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000001580)) accept4$netrom(r3, &(0x7f0000001440)={{0x3, @bcast}, [@remote, @bcast, @rose, @rose, @remote, @rose, @bcast, @bcast]}, &(0x7f00000014c0)=0x48, 0x80000) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r5, 0x60}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000008fe9ada631e8c000"/27, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000ffffffffdbaaf0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=3531): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000600)}, {&(0x7f00000006c0)}, {0x0}], 0x4}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): sport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 644.276269][T13560] device veth1_macvtap entered promiscuous mode [ 644.303841][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 644.350170][T13560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.370931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 644.390959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 644.399369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 644.408870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.430911][T13560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.445710][T13735] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 644.473157][T13560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.483937][T13560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.495028][T13560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.516761][T13560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.529689][ T4257] Bluetooth: hci5: command 0x040f tx timeout [ 644.543443][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2831'. [ 644.573536][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2830'. [ 644.603404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 644.618305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 644.666067][T13739] bridge5: port 1(veth17) entered blocking state [ 644.680445][T13739] bridge5: port 1(veth17) entered disabled state [ 644.700694][T13739] device veth17 entered promiscuous mode [ 644.764871][T13738] bridge5: port 2(veth19) entered blocking state [ 644.789068][T13738] bridge5: port 2(veth19) entered disabled state [ 644.811419][T13738] device veth19 entered promiscuous mode [ 644.857098][T13755] tipc: Enabling of bearer rejected, failed to enable media [ 644.996343][T13764] tipc: Enabling of bearer rejected, failed to enable media [ 645.037358][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.060363][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.086443][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 645.120287][T13770] tipc: Enabling of bearer rejected, failed to enable media [ 645.159655][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.167700][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.223421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 645.499303][T13789] tipc: Started in network mode [ 645.537114][T13789] tipc: Node identity 86750e93f518, cluster identity 4711 [ 645.572346][T13789] tipc: Enabled bearer , priority 0 [ 645.766015][T13801] device syzkaller0 entered promiscuous mode [ 645.816813][T13811] bridge7: port 1(veth7) entered blocking state [ 645.836498][T13811] bridge7: port 1(veth7) entered disabled state [ 645.851004][T13811] device veth7 entered promiscuous mode [ 645.865138][T13808] netlink: 'syz.5.2844': attribute type 10 has an invalid length. [ 645.896145][T13810] tipc: Enabling of bearer rejected, failed to enable media [ 645.926024][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 645.945616][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 645.971231][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.026716][T13787] tipc: Resetting bearer [ 646.111877][T13787] tipc: Disabling bearer [ 646.132987][T13821] tipc: Enabling of bearer rejected, failed to enable media [ 646.251721][T13829] device veth0_to_bond left promiscuous mode [ 646.266161][T13829] bridge2: port 2(veth0_to_bond) entered disabled state [ 646.303965][T13836] tipc: Enabling of bearer rejected, failed to enable media [ 646.662984][T11198] Bluetooth: hci5: command 0x0419 tx timeout [ 647.166176][T13869] netlink: 'syz.1.2862': attribute type 10 has an invalid length. [ 647.184456][T13869] device syz_tun entered promiscuous mode [ 647.211968][T13869] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 647.261333][T13871] netlink: 'syz.0.2863': attribute type 10 has an invalid length. [ 647.273983][T13872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 647.295568][T13872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.305293][T13872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.397250][T13871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 647.413773][T13871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.427298][T13871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.516799][T13874] tipc: Enabling of bearer rejected, failed to enable media [ 647.671289][T13880] tipc: Enabling of bearer rejected, failed to enable media [ 648.837237][T11585] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 648.893615][T13897] tipc: Enabling of bearer rejected, failed to enable media [ 648.976959][T13901] __nla_validate_parse: 9 callbacks suppressed [ 648.976980][T13901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2875'. [ 649.019524][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2876'. [ 649.320968][T11585] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.360288][T11585] usb 2-1: not running at top speed; connect to a high speed hub [ 649.459871][T11585] usb 2-1: config 0 has no interfaces? [ 650.053619][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 650.070520][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 650.079537][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.564763][T13936] infiniband !yz!: set active [ 651.572005][T11585] usb 2-1: string descriptor 0 read error: -71 [ 651.578340][T11585] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0102, bcdDevice= 0.40 [ 651.601163][T11585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.661290][T11585] usb 2-1: config 0 descriptor?? [ 651.687386][T13944] tipc: Enabling of bearer rejected, failed to enable media [ 651.700545][T11585] usb 2-1: can't set config #0, error -71 [ 651.708455][T13946] loop1: detected capacity change from 0 to 512 [ 651.735106][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2889'. [ 651.737370][T11585] usb 2-1: USB disconnect, device number 33 [ 651.856123][T13946] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 651.893768][T13948] bridge8: port 1(veth9) entered blocking state [ 651.907509][T13946] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 651.936483][T13948] bridge8: port 1(veth9) entered disabled state [ 651.944485][T13948] device veth9 entered promiscuous mode [ 652.055811][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 652.098841][T13970] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.2890: corrupted inode contents [ 652.144357][T13970] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.2890: mark_inode_dirty error [ 652.178939][T13970] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.2890: corrupted inode contents [ 652.240670][T13970] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.2890: mark_inode_dirty error [ 652.272641][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2897'. [ 652.454530][T13973] bridge6: port 1(veth13) entered blocking state [ 652.539317][T13973] bridge6: port 1(veth13) entered disabled state [ 652.591272][T13973] device veth13 entered promiscuous mode [ 652.751834][T13980] bridge6: port 2(veth15) entered blocking state [ 652.781861][T13980] bridge6: port 2(veth15) entered disabled state [ 652.811080][T13980] device veth15 entered promiscuous mode [ 652.874614][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 653.815467][T14006] tipc: Enabling of bearer rejected, failed to enable media [ 653.851554][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 653.911470][T14006] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2906'. [ 653.992843][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2909'. [ 654.084505][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2909'. [ 654.105791][T14018] netlink: 'syz.2.2911': attribute type 10 has an invalid length. [ 654.183280][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.196760][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.206822][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.363454][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2912'. [ 654.450999][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2912'. [ 654.581089][T14026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2914'. [ 654.623295][T14028] netlink: 'syz.4.2915': attribute type 2 has an invalid length. [ 654.851537][T14042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'. [ 654.864558][T14040] netlink: 'syz.5.2921': attribute type 10 has an invalid length. [ 654.897770][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.926903][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.937750][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.053768][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 655.084914][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2926'. [ 655.280900][ T13] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 655.891632][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 655.912087][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.969619][ T13] usb 2-1: Product: syz [ 655.993642][ T13] usb 2-1: Manufacturer: syz [ 656.018688][ T13] usb 2-1: SerialNumber: syz [ 656.052090][ T13] usb 2-1: config 0 descriptor?? [ 656.231182][T14078] netlink: 'syz.2.2937': attribute type 10 has an invalid length. [ 656.273517][T14064] chnl_net:caif_netlink_parms(): no params data found [ 656.297194][T14078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 656.339853][T14078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.340023][ T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 656.368258][T14078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.521298][T14064] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.558667][T14064] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.581200][T14064] device bridge_slave_0 entered promiscuous mode [ 656.636686][T14064] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.730303][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.787691][T14064] device bridge_slave_1 entered promiscuous mode [ 656.904140][T14064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.945074][T14064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.012498][T14090] netlink: 'syz.2.2940': attribute type 2 has an invalid length. [ 657.049465][T14064] team0: Port device team_slave_0 added [ 657.070860][T14064] team0: Port device team_slave_1 added [ 657.141883][T14064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.148921][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.223250][T14064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.250826][T14064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.268141][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.325016][T14064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.394050][T14064] device hsr_slave_0 entered promiscuous mode [ 657.405150][T14064] device hsr_slave_1 entered promiscuous mode [ 657.419303][T14064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.442965][T14064] Cannot create hsr debugfs directory [ 657.651274][T11198] Bluetooth: hci2: command 0x0409 tx timeout [ 657.683681][T14064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.799034][T14064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.888610][T14064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.977904][T14064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.188590][T14064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 658.201607][T14064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 658.219312][T14064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 658.230352][T14064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 658.420623][T14064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.437546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.446714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.472433][T14064] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.496494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.507193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.526845][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.534048][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.571180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 658.590578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.607869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.627108][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.634294][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.660177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.711345][T14125] netlink: 'syz.2.2948': attribute type 10 has an invalid length. [ 658.719513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.730310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.752254][ T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 658.764061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.787952][ T13] usb 2-1: USB disconnect, device number 34 [ 658.793455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.821075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.869387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 659.096857][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 659.115084][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.132314][T14064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.145098][T14064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.168868][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.198942][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.228935][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2952'. [ 659.958321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 660.006219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.244714][T14064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.354286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 660.373392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 660.415143][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 660.544685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 660.563720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 660.593559][T14064] device veth0_vlan entered promiscuous mode [ 660.616536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 660.632218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 660.663619][T14064] device veth1_vlan entered promiscuous mode [ 660.732660][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 660.751624][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 660.790987][T14064] device veth0_macvtap entered promiscuous mode [ 660.828571][T14064] device veth1_macvtap entered promiscuous mode [ 660.888293][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.914498][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.939336][T14064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.959537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 660.974158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 660.991855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.014368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.039393][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.085603][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.123905][T14064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.150282][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.244980][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.274003][T14064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.315929][T14064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.348939][T14064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.368939][T14064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.633354][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.651561][T14179] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 661.668530][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.711967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 661.725245][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2965'. [ 661.765025][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.778003][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.786250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.908391][T14188] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 661.922577][T14188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2967'. [ 662.182417][ T9177] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 662.450517][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 662.585558][T14214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2974'. [ 662.791951][ T9177] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 662.818336][ T9177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.841827][ T9177] usb 1-1: Product: syz [ 662.846098][ T9177] usb 1-1: Manufacturer: syz [ 662.873860][ T9177] usb 1-1: SerialNumber: syz [ 664.359811][ T9177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 664.682495][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 665.076186][T14266] loop1: detected capacity change from 0 to 512 [ 665.111030][T14266] FAT-fs (loop1): Unrecognized mount option "00000000000000000000110" or missing value [ 665.559644][ T4242] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 665.732344][ T9177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 665.744217][ T9177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 665.756498][ T9177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 665.765941][ T9177] lan78xx: probe of 1-1:1.0 failed with error -71 [ 665.779046][ T9177] usb 1-1: USB disconnect, device number 34 [ 666.005579][T14290] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 666.022133][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 666.089985][ T4242] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 666.099089][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.107629][ T4242] usb 2-1: Product: syz [ 666.112366][ T4242] usb 2-1: Manufacturer: syz [ 666.119948][ T4242] usb 2-1: SerialNumber: syz [ 666.132386][ T4242] usb 2-1: config 0 descriptor?? [ 666.442742][ T4242] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 667.802116][T14321] netlink: 'syz.0.3011': attribute type 10 has an invalid length. [ 667.873088][T14321] device syz_tun entered promiscuous mode [ 667.895033][T14321] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 667.910931][T14323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 667.941515][T14323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.979175][T14323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.949788][ T4242] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 668.966935][ T4242] usb 2-1: USB disconnect, device number 35 [ 669.505433][T14365] device syzkaller0 entered promiscuous mode [ 669.786806][ T6714] bond0: (slave syz_tun): Releasing backup interface [ 670.512779][T14374] chnl_net:caif_netlink_parms(): no params data found [ 670.713700][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.752410][T14374] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.771235][T14374] device bridge_slave_0 entered promiscuous mode [ 670.812494][T14374] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.832930][T14374] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.858497][T14374] device bridge_slave_1 entered promiscuous mode [ 670.942372][T14374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.009506][T14374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.101632][T14374] team0: Port device team_slave_0 added [ 671.133405][T14374] team0: Port device team_slave_1 added [ 671.232950][T14374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.307412][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.388913][T14430] xt_hashlimit: size too large, truncated to 1048576 [ 671.433553][T14374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.433621][T14430] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 671.686957][T14374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.709664][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.739495][T14374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.754874][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'. [ 671.766073][T14429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3045'. [ 671.785195][T14419] 8021q: VLANs not supported on ip6tnl0 [ 671.891576][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 671.966400][T14374] device hsr_slave_0 entered promiscuous mode [ 671.994251][T14374] device hsr_slave_1 entered promiscuous mode [ 672.034030][T14374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.055852][T14374] Cannot create hsr debugfs directory [ 672.354926][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3055'. [ 672.446615][T14374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.480160][ T13] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 672.543762][T14374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.618530][T14374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.698214][T14374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.898880][T14374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.923341][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.944784][ T13] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 672.951544][T14374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.973389][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.997862][ T13] usb 2-1: config 0 descriptor?? [ 673.007466][T14374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 673.033881][T14374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 673.055459][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 673.260268][ T13] pwc: send_video_command error -71 [ 673.265538][ T13] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 673.287965][ T13] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 673.305738][T14374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.325792][ T13] usb 2-1: USB disconnect, device number 36 [ 673.356340][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 673.370946][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 673.390746][T14374] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.424244][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 673.445839][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.463614][ T3044] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.470779][ T3044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.519907][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 673.539301][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 673.558666][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.581348][ T3044] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.588483][ T3044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.632435][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 673.675235][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 673.691356][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.725593][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.745516][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.773189][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.811142][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 673.828758][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.850959][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.870919][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.889324][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.890001][ T13] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 673.924611][T14374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.979370][T11585] Bluetooth: hci0: command 0x041b tx timeout [ 674.126936][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 674.136741][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.155029][T14374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.189144][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 674.204248][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 674.258326][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 674.274753][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 674.289392][T14374] device veth0_vlan entered promiscuous mode [ 674.302884][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.310804][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.326810][T14497] overlayfs: failed to clone upperpath [ 674.333062][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.344627][ T13] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.359498][T14374] device veth1_vlan entered promiscuous mode [ 674.370136][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.402389][ T13] usb 2-1: config 0 descriptor?? [ 674.434181][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 674.458926][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 674.466021][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 674.488727][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.506109][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.522021][T14374] device veth0_macvtap entered promiscuous mode [ 674.574330][T14374] device veth1_macvtap entered promiscuous mode [ 674.603601][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.616026][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.643437][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.665135][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.677604][ T13] pwc: send_video_command error -71 [ 674.690005][ T13] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 674.719481][T14374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.727357][ T13] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 674.751904][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.769031][ T13] usb 2-1: USB disconnect, device number 37 [ 674.798089][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.818436][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.829891][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.857703][T14374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.883903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 674.903693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 674.928290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 674.956706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 674.985023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.003339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.030664][T14374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.059703][T14374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.068468][T14374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.099620][T14374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.284005][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.335341][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.383488][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.456288][ T4577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.471262][ T4577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.215291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 676.272077][T11585] Bluetooth: hci0: command 0x040f tx timeout [ 676.619749][ T4242] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 676.746376][ T4301] usb 5-1: USB disconnect, device number 17 [ 676.995910][T14536] loop1: detected capacity change from 0 to 512 [ 677.153804][ T4242] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 677.204420][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.219670][ T4242] usb 1-1: Product: syz [ 677.223892][ T4242] usb 1-1: Manufacturer: syz [ 677.231629][ T4242] usb 1-1: SerialNumber: syz [ 677.255147][ T4242] usb 1-1: config 0 descriptor?? [ 677.310506][T14536] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 677.337562][T14536] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 677.422626][T14536] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.3077: corrupted inode contents [ 677.452031][T14536] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.3077: mark_inode_dirty error [ 677.519960][ T4242] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 677.528721][T14536] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.3077: corrupted inode contents [ 677.597775][T14536] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.3077: mark_inode_dirty error [ 677.876397][T14539] chnl_net:caif_netlink_parms(): no params data found [ 678.079788][T11585] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 678.094382][T14539] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.115242][T14539] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.158841][T14539] device bridge_slave_0 entered promiscuous mode [ 678.186491][T14539] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.218984][T14539] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.244518][T14539] device bridge_slave_1 entered promiscuous mode [ 678.307534][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 678.358086][T14539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.393213][T14539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.473125][T14539] team0: Port device team_slave_0 added [ 678.483605][T14539] team0: Port device team_slave_1 added [ 678.494238][T11585] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.518247][T14539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.526569][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.539771][T11585] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 678.593964][T11585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.603687][T14539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.631022][T14539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.644793][T11585] usb 2-1: config 0 descriptor?? [ 678.646561][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.704385][T14539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.717257][T11585] pwc: Askey VC010 type 2 USB webcam detected. [ 678.766837][T14539] device hsr_slave_0 entered promiscuous mode [ 678.784820][T14539] device hsr_slave_1 entered promiscuous mode [ 678.795622][T14539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.820792][T14539] Cannot create hsr debugfs directory [ 679.026396][T14539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.096774][T14539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.139725][T11585] pwc: recv_control_msg error -32 req 02 val 2b00 [ 679.168884][T14539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.179694][T11585] pwc: recv_control_msg error -32 req 02 val 2700 [ 679.239697][T11585] pwc: recv_control_msg error -32 req 02 val 2c00 [ 679.257960][T14539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.260033][ T9177] Bluetooth: hci4: command 0x0409 tx timeout [ 679.299767][T11585] pwc: recv_control_msg error -32 req 04 val 1000 [ 679.349702][T11585] pwc: recv_control_msg error -32 req 04 val 1300 [ 679.394116][T11585] pwc: recv_control_msg error -32 req 04 val 1400 [ 679.406301][T14539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 679.417924][T14539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 679.429123][T14539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 679.439835][T14539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.448355][T11585] pwc: recv_control_msg error -32 req 02 val 2000 [ 679.494313][T11585] pwc: recv_control_msg error -32 req 02 val 2100 [ 679.563610][T11585] pwc: recv_control_msg error -32 req 04 val 1500 [ 679.583715][T14539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.606595][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 679.622965][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 679.630674][T11585] pwc: recv_control_msg error -32 req 02 val 2500 [ 679.665222][T14539] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.679204][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 679.687852][T11585] pwc: recv_control_msg error -32 req 02 val 2400 [ 679.701982][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 679.720949][ T4577] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.728070][ T4577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.756408][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 679.767084][T11585] pwc: recv_control_msg error -32 req 02 val 2600 [ 679.784417][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3087'. [ 679.806795][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 679.829878][T11585] pwc: recv_control_msg error -32 req 02 val 2900 [ 679.855611][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 679.888628][ T3044] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.895933][ T3044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.903168][T14589] loop2: detected capacity change from 0 to 512 [ 679.950865][T14589] FAT-fs (loop2): Unrecognized mount option "00000000000000000000024" or missing value [ 679.959862][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 679.980776][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 680.028327][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.049953][ T4242] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 680.089740][T11585] pwc: recv_control_msg error -71 req 04 val 1100 [ 680.094625][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.112707][ T4242] usb 1-1: USB disconnect, device number 35 [ 680.122017][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 680.130015][T11585] pwc: recv_control_msg error -71 req 04 val 1200 [ 680.173396][T11585] pwc: Registered as video103. [ 680.188032][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.208283][T11585] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 680.224886][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 680.258453][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 680.296907][T11585] usb 2-1: USB disconnect, device number 38 [ 680.315867][T14539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.349832][T14539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.370986][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 680.384108][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 680.427187][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 680.475783][T14595] loop2: detected capacity change from 0 to 512 [ 680.683228][T14595] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 680.724467][T14595] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.805128][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'. [ 680.844865][T14595] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.3090: corrupted inode contents [ 680.881129][T14595] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.3090: mark_inode_dirty error [ 680.930134][T14595] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.3090: corrupted inode contents [ 680.988837][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 680.991450][T14595] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.3090: mark_inode_dirty error [ 681.004922][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.051899][T14539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.224531][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 681.260902][T14616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3095'. [ 681.330822][T11205] Bluetooth: hci4: command 0x041b tx timeout [ 681.354923][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3096'. [ 681.537066][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3098'. [ 681.549814][T11205] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 681.608280][ T3109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 681.629149][ T3109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 681.698282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 681.713701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 681.735849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 681.749683][T11205] usb 3-1: device descriptor read/64, error -71 [ 681.759023][T14638] loop1: detected capacity change from 0 to 512 [ 681.781406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 681.790798][T14539] device veth0_vlan entered promiscuous mode [ 681.819245][T14539] device veth1_vlan entered promiscuous mode [ 681.846630][T14638] FAT-fs (loop1): Unrecognized mount option "00000000000000000000164" or missing value [ 681.936993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 681.952753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 681.967179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 681.978592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.023201][T14539] device veth0_macvtap entered promiscuous mode [ 682.029848][T11205] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 682.045128][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3103'. [ 682.068526][T14539] device veth1_macvtap entered promiscuous mode [ 682.093094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 682.112287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 682.140680][T14539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.161482][T14539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.186483][T14539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.213004][T14539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.239592][T14539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.250061][T11205] usb 3-1: device descriptor read/64, error -71 [ 682.269689][T14539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.290237][T14539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.300588][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 682.316500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 682.336430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.363536][T14539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.370750][T11205] usb usb3-port1: attempt power cycle [ 682.391988][T14539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.420975][T14539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.436787][T14652] loop1: detected capacity change from 0 to 256 [ 682.443176][T14539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.443201][T14539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.443219][T14539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.456801][T14539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.524170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 682.543951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.561379][T14652] FAT-fs (loop1): Directory bread(block 64) failed [ 682.582924][T14539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.596571][T14652] FAT-fs (loop1): Directory bread(block 65) failed [ 682.605545][T14539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.639780][T14652] FAT-fs (loop1): Directory bread(block 66) failed [ 682.646389][T14652] FAT-fs (loop1): Directory bread(block 67) failed [ 682.653267][T14539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.669606][T14539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.687713][T14652] FAT-fs (loop1): Directory bread(block 68) failed [ 682.717578][T14652] FAT-fs (loop1): Directory bread(block 69) failed [ 682.764098][T14652] FAT-fs (loop1): Directory bread(block 70) failed [ 682.789791][T14652] FAT-fs (loop1): Directory bread(block 71) failed [ 682.799669][T11205] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 682.814953][T14652] FAT-fs (loop1): Directory bread(block 72) failed [ 682.838694][T14652] FAT-fs (loop1): Directory bread(block 73) failed [ 682.860741][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.868638][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.899814][T11205] usb 3-1: device descriptor read/8, error -71 [ 682.918753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 682.963316][ T3044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.999998][ T3044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.028810][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 683.171170][T11205] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 683.179681][ T4257] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 683.269930][T11205] usb 3-1: device descriptor read/8, error -71 [ 683.314598][ T4187] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 683.389877][T11205] usb usb3-port1: unable to enumerate USB device [ 683.402547][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3113'. [ 683.412345][T11205] Bluetooth: hci4: command 0x040f tx timeout [ 683.474163][T14671] bridge8: port 1(veth17) entered blocking state [ 683.493593][T14671] bridge8: port 1(veth17) entered disabled state [ 683.513962][T14671] device veth17 entered promiscuous mode [ 683.540001][ T4257] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 683.554524][ T4257] usb 1-1: config 0 has no interface number 0 [ 683.571139][ T4257] usb 1-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 683.589644][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.589661][ T4187] usb 2-1: Using ep0 maxpacket: 16 [ 683.614590][T14672] bridge8: port 2(veth19) entered blocking state [ 683.631864][T14672] bridge8: port 2(veth19) entered disabled state [ 683.637343][ T4257] usb 1-1: config 0 descriptor?? [ 683.651438][T14672] device veth19 entered promiscuous mode [ 683.702668][ T4257] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 683.717946][ T4257] usb 1-1: setting power ON [ 683.726917][ T4257] dvb-usb: bulk message failed: -22 (2/0) [ 683.731993][ T4187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 683.773480][ T4187] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 683.795896][ T4187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.836163][ T4187] usb 2-1: config 0 descriptor?? [ 683.899937][ T4257] dvb-usb: bulk message failed: -22 (1/0) [ 683.915702][T14661] netlink: 'syz.0.3111': attribute type 2 has an invalid length. [ 684.021943][ T4257] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 684.045957][ T4257] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 684.065287][ T4257] dvb_usb_cxusb: probe of 1-1:0.30 failed with error -22 [ 684.105369][ T4257] usb 1-1: USB disconnect, device number 36 [ 684.111856][T14652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.134408][T14652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.164231][T14652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.174994][T14652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.406935][T14678] loop2: detected capacity change from 0 to 128 [ 684.432975][T14681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3117'. [ 685.313738][T14678] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 685.353177][T14678] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 685.370995][ T4187] usbhid 2-1:0.0: can't add hid device: -71 [ 685.377061][ T4187] usbhid: probe of 2-1:0.0 failed with error -71 [ 685.398668][ T4187] usb 2-1: USB disconnect, device number 39 [ 685.472397][T14678] ext2 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.492581][ T4242] Bluetooth: hci4: command 0x0419 tx timeout [ 685.501967][T14691] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.509266][T14691] xt_hashlimit: size too large, truncated to 1048576 [ 685.516866][T14691] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 685.527882][T14691] 8021q: VLANs not supported on ip6tnl0 [ 685.736315][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.742714][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.869649][ T4257] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 686.109608][ T4257] usb 3-1: Using ep0 maxpacket: 16 [ 686.227733][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3127'. [ 686.230499][ T4257] usb 3-1: config 0 interface 0 has no altsetting 0 [ 686.246759][T11198] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 686.265481][ T4257] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 686.285711][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.332371][ T4257] usb 3-1: config 0 descriptor?? [ 686.346008][T14714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3128'. [ 686.426959][T14716] netlink: 'syz.5.3129': attribute type 2 has an invalid length. [ 686.450869][T11198] usb 2-1: device descriptor read/64, error -71 [ 686.513245][T14718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3130'. [ 686.721959][T11198] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 686.932607][T11198] usb 2-1: device descriptor read/64, error -71 [ 687.039748][ T4257] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 687.052215][ T4301] usb 3-1: USB disconnect, device number 28 [ 687.060059][T11198] usb usb2-port1: attempt power cycle [ 687.409784][T11585] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 687.469689][T11198] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 687.560039][T11198] usb 2-1: device descriptor read/8, error -71 [ 687.570499][ T4257] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 687.599505][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.611193][ T4257] usb 1-1: Product: syz [ 687.615417][ T4257] usb 1-1: Manufacturer: syz [ 687.622753][ T4257] usb 1-1: SerialNumber: syz [ 687.663662][ T4257] usb 1-1: config 0 descriptor?? [ 687.841168][T11198] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 687.919943][ T4257] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 687.942472][T11198] usb 2-1: device descriptor read/8, error -71 [ 687.969796][T11585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.986153][T11585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.060944][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 688.072132][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 688.079725][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.089812][ T4201] Workqueue: hci1 hci_rx_work [ 688.094539][ T4201] Call Trace: [ 688.097847][ T4201] [ 688.100803][ T4201] dump_stack_lvl+0x188/0x250 [ 688.105541][ T4201] ? show_regs_print_info+0x20/0x20 [ 688.110787][ T4201] ? load_image+0x400/0x400 [ 688.115345][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 688.120485][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 688.125190][ T4201] ? preempt_schedule_thunk+0x16/0x18 [ 688.130602][ T4201] kobject_add_internal+0x6e0/0xd90 [ 688.135848][ T4201] kobject_add+0x160/0x230 [ 688.140302][ T4201] ? kobject_init+0x1d0/0x1d0 [ 688.145050][ T4201] ? klist_children_get+0x50/0x50 [ 688.150112][ T4201] ? get_device_parent+0x121/0x3f0 [ 688.155258][ T4201] device_add+0x483/0xfb0 [ 688.159745][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 688.164725][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 688.170061][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 688.175203][ T4201] ? __switch_to_asm+0x34/0x60 [ 688.180017][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 688.185601][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 688.190485][ T4201] ? hci_event_packet+0x37b/0x1370 [ 688.195625][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 688.200681][ T4201] ? mark_lock+0x94/0x320 [ 688.205036][ T4201] ? release_firmware_map_entry+0x190/0x190 [ 688.210965][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 688.217071][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 688.222745][ T4201] ? mutex_unlock+0x10/0x10 [ 688.227283][ T4201] ? preempt_schedule+0xbc/0xd0 [ 688.232204][ T4201] ? schedule_preempt_disabled+0x20/0x20 [ 688.237870][ T4201] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 688.243536][ T4201] hci_event_packet+0xe48/0x1370 [ 688.248515][ T4201] ? rcu_lock_release+0x20/0x20 [ 688.253496][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 688.258736][ T4201] hci_rx_work+0x255/0xa10 [ 688.263210][ T4201] process_one_work+0x85f/0x1010 [ 688.268198][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 688.273876][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 688.279198][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 688.284252][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 688.289827][ T4201] ? wq_worker_running+0x97/0x170 [ 688.294889][ T4201] worker_thread+0xaa6/0x1290 [ 688.299649][ T4201] kthread+0x436/0x520 [ 688.303743][ T4201] ? rcu_lock_release+0x20/0x20 [ 688.308620][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 688.313250][ T4201] ret_from_fork+0x1f/0x30 [ 688.317718][ T4201] [ 688.347567][T11198] usb usb2-port1: unable to enumerate USB device [ 688.366081][ T4201] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 688.380762][ T4201] Bluetooth: hci1: failed to register connection device [ 688.542490][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 688.686073][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3141'. [ 688.803098][T11585] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 688.818762][T11585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.832124][T11585] usb 5-1: Product: syz [ 688.836346][T11585] usb 5-1: Manufacturer: syz [ 688.844197][T11585] usb 5-1: SerialNumber: syz [ 688.855093][T11585] usb 5-1: config 0 descriptor?? [ 688.905205][T11585] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 688.927980][T11585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 688.960190][T11585] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 688.974691][T11585] usb 5-1: media controller created [ 689.026678][T11585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.065170][T14759] loop1: detected capacity change from 0 to 128 [ 689.149835][T14759] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 689.155003][T11585] DVB: Unable to find symbol tda10046_attach() [ 689.178939][T11585] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 689.204801][T11585] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 689.232889][T14759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 689.284469][T14759] ext2 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.629729][T11198] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 689.659792][ T4301] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 689.869691][T11198] usb 3-1: Using ep0 maxpacket: 16 [ 689.885499][T14729] udc-core: couldn't find an available UDC or it's busy [ 689.895210][T14729] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.900228][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 689.990065][T11198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.000468][T11198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.019898][ T4301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.026537][ T4301] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 690.048335][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.072950][ T4301] usb 2-1: config 0 descriptor?? [ 690.149791][T11585] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 690.159874][T11198] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.168781][T11585] usb 5-1: USB disconnect, device number 18 [ 690.183510][T11198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.221459][T11198] usb 3-1: Product: syz [ 690.225758][T11198] usb 3-1: Manufacturer: syz [ 690.255298][T11198] usb 3-1: SerialNumber: syz [ 690.653108][T13421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 690.662932][T13421] CPU: 0 PID: 13421 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 690.670683][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.680792][T13421] Workqueue: hci1 hci_rx_work [ 690.685521][T13421] Call Trace: [ 690.688828][T13421] [ 690.691778][T13421] dump_stack_lvl+0x188/0x250 [ 690.696497][T13421] ? show_regs_print_info+0x20/0x20 [ 690.701729][T13421] ? load_image+0x400/0x400 [ 690.706288][T13421] sysfs_create_dir_ns+0x26a/0x290 [ 690.711436][T13421] ? sysfs_warn_dup+0xa0/0xa0 [ 690.716150][T13421] ? process_one_work+0x85f/0x1010 [ 690.721324][T13421] ? do_raw_spin_unlock+0x11d/0x230 [ 690.726563][T13421] kobject_add_internal+0x6e0/0xd90 [ 690.731809][T13421] kobject_add+0x160/0x230 [ 690.736261][T13421] ? kobject_init+0x1d0/0x1d0 [ 690.740968][T13421] ? klist_children_get+0x50/0x50 [ 690.746257][T13421] ? get_device_parent+0x121/0x3f0 [ 690.751407][T13421] device_add+0x483/0xfb0 [ 690.755786][T13421] hci_conn_add_sysfs+0xd1/0x1e0 [ 690.760777][T13421] le_conn_complete_evt+0xc48/0x15c0 [ 690.766130][T13421] ? cs_le_create_conn+0x5e0/0x5e0 [ 690.771297][T13421] ? __mutex_trylock_common+0x155/0x260 [ 690.776901][T13421] hci_le_meta_evt+0x285/0x3c90 [ 690.781848][T13421] ? hci_event_packet+0x37b/0x1370 [ 690.787010][T13421] ? __lock_acquire+0x7d10/0x7d10 [ 690.792086][T13421] ? hci_remote_host_features_evt+0x280/0x280 [ 690.798214][T13421] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 690.803883][T13421] ? mark_lock+0x94/0x320 [ 690.808369][T13421] ? mutex_unlock+0x10/0x10 [ 690.812914][T13421] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 690.818947][T13421] ? lock_chain_count+0x20/0x20 [ 690.823840][T13421] ? __rwlock_init+0x140/0x140 [ 690.828651][T13421] hci_event_packet+0xe48/0x1370 [ 690.833622][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 690.838862][T13421] ? rcu_lock_release+0x20/0x20 [ 690.843752][T13421] ? hci_send_to_monitor+0x9c/0x4a0 [ 690.848984][T13421] hci_rx_work+0x255/0xa10 [ 690.853530][T13421] process_one_work+0x85f/0x1010 [ 690.858519][T13421] ? worker_detach_from_pool+0x240/0x240 [ 690.864184][T13421] ? lockdep_hardirqs_off+0x70/0x100 [ 690.869505][T13421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 690.874556][T13421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 690.880135][T13421] ? wq_worker_running+0x97/0x170 [ 690.885190][T13421] worker_thread+0xaa6/0x1290 [ 690.889905][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 690.895138][T13421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 690.901076][T13421] kthread+0x436/0x520 [ 690.905170][T13421] ? rcu_lock_release+0x20/0x20 [ 690.910048][T13421] ? kthread_blkcg+0xd0/0xd0 [ 690.914669][T13421] ret_from_fork+0x1f/0x30 [ 690.919125][T13421] [ 690.961111][T13421] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 690.974591][T13421] Bluetooth: hci1: failed to register connection device [ 690.981853][T13421] Bluetooth: hci1: link tx timeout [ 690.989388][T13421] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 691.159681][ T4257] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 691.187531][ T4257] usb 1-1: USB disconnect, device number 37 [ 691.279821][T11198] usb 3-1: 0:2 : does not exist [ 691.325085][T11198] usb 3-1: USB disconnect, device number 29 [ 691.374992][T11585] usb 2-1: USB disconnect, device number 44 [ 691.483769][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 691.561196][T13941] udevd[13941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.840092][T14801] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.866495][T14801] xt_hashlimit: size too large, truncated to 1048576 [ 691.888389][T14801] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 691.918588][T14801] 8021q: VLANs not supported on ip6tnl0 [ 692.064447][T14807] loop1: detected capacity change from 0 to 512 [ 692.100857][T14807] FAT-fs (loop1): Unrecognized mount option "00000000000000000000202" or missing value [ 692.159739][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 692.419694][ T7] usb 5-1: device descriptor read/64, error -71 [ 692.713373][ T7] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 692.929852][ T7] usb 5-1: device descriptor read/64, error -71 [ 693.064254][ T7] usb usb5-port1: attempt power cycle [ 693.509689][ T7] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 693.639844][ T7] usb 5-1: device descriptor read/8, error -71 [ 693.690861][T14836] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.708656][T14836] xt_hashlimit: size too large, truncated to 1048576 [ 693.739588][T14836] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 693.770624][T14836] 8021q: VLANs not supported on ip6tnl0 [ 693.848402][T14840] netlink: 'syz.5.3174': attribute type 2 has an invalid length. [ 693.949850][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 694.053788][ T7] usb 5-1: device descriptor read/8, error -71 [ 694.181583][ T7] usb usb5-port1: unable to enumerate USB device [ 694.319704][ T4257] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 694.500008][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 694.691842][ T4257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.735117][ T4257] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 694.798383][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.891584][ T4257] usb 3-1: config 0 descriptor?? [ 694.987549][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 695.189790][ T4257] pwc: send_video_command error -71 [ 695.195228][ T4257] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 695.241661][ T4257] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 695.279467][ T4257] usb 3-1: USB disconnect, device number 30 [ 695.542540][T13421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 695.552582][T13421] CPU: 0 PID: 13421 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 695.560249][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.570433][T13421] Workqueue: hci1 hci_rx_work [ 695.575158][T13421] Call Trace: [ 695.578470][T13421] [ 695.581421][T13421] dump_stack_lvl+0x188/0x250 [ 695.586153][T13421] ? show_regs_print_info+0x20/0x20 [ 695.591389][T13421] ? load_image+0x400/0x400 [ 695.595942][T13421] sysfs_create_dir_ns+0x26a/0x290 [ 695.601087][T13421] ? sysfs_warn_dup+0xa0/0xa0 [ 695.605971][T13421] ? process_one_work+0x85f/0x1010 [ 695.611126][T13421] ? do_raw_spin_unlock+0x11d/0x230 [ 695.616371][T13421] kobject_add_internal+0x6e0/0xd90 [ 695.621612][T13421] kobject_add+0x160/0x230 [ 695.626141][T13421] ? kobject_init+0x1d0/0x1d0 [ 695.630862][T13421] ? klist_children_get+0x50/0x50 [ 695.635923][T13421] ? get_device_parent+0x121/0x3f0 [ 695.641073][T13421] device_add+0x483/0xfb0 [ 695.645448][T13421] hci_conn_add_sysfs+0xd1/0x1e0 [ 695.650439][T13421] le_conn_complete_evt+0xc48/0x15c0 [ 695.655799][T13421] ? cs_le_create_conn+0x5e0/0x5e0 [ 695.660949][T13421] ? __mutex_trylock_common+0x155/0x260 [ 695.666535][T13421] hci_le_meta_evt+0x285/0x3c90 [ 695.671417][T13421] ? hci_event_packet+0x37b/0x1370 [ 695.676576][T13421] ? __lock_acquire+0x7d10/0x7d10 [ 695.681657][T13421] ? hci_remote_host_features_evt+0x280/0x280 [ 695.687759][T13421] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 695.693429][T13421] ? mark_lock+0x94/0x320 [ 695.697795][T13421] ? mutex_unlock+0x10/0x10 [ 695.702346][T13421] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 695.708371][T13421] ? lock_chain_count+0x20/0x20 [ 695.713282][T13421] ? __rwlock_init+0x140/0x140 [ 695.718224][T13421] hci_event_packet+0xe48/0x1370 [ 695.723226][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 695.728470][T13421] ? rcu_lock_release+0x20/0x20 [ 695.733366][T13421] ? hci_send_to_monitor+0x9c/0x4a0 [ 695.738745][T13421] hci_rx_work+0x255/0xa10 [ 695.743210][T13421] process_one_work+0x85f/0x1010 [ 695.748300][T13421] ? worker_detach_from_pool+0x240/0x240 [ 695.754015][T13421] ? lockdep_hardirqs_off+0x70/0x100 [ 695.759355][T13421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 695.764412][T13421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 695.770006][T13421] ? wq_worker_running+0x97/0x170 [ 695.775072][T13421] worker_thread+0xaa6/0x1290 [ 695.779796][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 695.780142][ T4257] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 695.785026][T13421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 695.798551][T13421] kthread+0x436/0x520 [ 695.802658][T13421] ? rcu_lock_release+0x20/0x20 [ 695.807549][T13421] ? kthread_blkcg+0xd0/0xd0 [ 695.812175][T13421] ret_from_fork+0x1f/0x30 [ 695.816642][T13421] [ 695.822933][T13421] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 695.837235][T13421] Bluetooth: hci1: failed to register connection device [ 695.847758][T13421] Bluetooth: hci1: link tx timeout [ 695.853110][T13421] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 696.199812][ T4257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.209859][ T7] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 696.228499][ T4257] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 696.257009][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.296441][ T4257] usb 3-1: config 0 descriptor?? [ 696.353700][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 696.621041][ T7] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 696.634044][ T7] usb 5-1: config 0 has no interface number 0 [ 696.653896][ T7] usb 5-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 696.683547][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.727370][ T7] usb 5-1: config 0 descriptor?? [ 696.779803][ T4257] pwc: recv_control_msg error -32 req 02 val 2b00 [ 696.792983][ T7] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 696.815058][ T7] usb 5-1: setting power ON [ 696.819811][ T4257] pwc: recv_control_msg error -32 req 02 val 2700 [ 696.839720][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 696.859724][ T4257] pwc: recv_control_msg error -32 req 02 val 2c00 [ 696.909715][ T4257] pwc: recv_control_msg error -32 req 04 val 1000 [ 696.949794][ T4257] pwc: recv_control_msg error -32 req 04 val 1300 [ 696.994849][T14891] netlink: 'syz.4.3192': attribute type 2 has an invalid length. [ 697.000047][ T4257] pwc: recv_control_msg error -32 req 04 val 1400 [ 697.003144][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 697.059674][ T4257] pwc: recv_control_msg error -32 req 02 val 2000 [ 697.111631][ T4257] pwc: recv_control_msg error -32 req 02 val 2100 [ 697.156231][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 697.160433][ T4257] pwc: recv_control_msg error -32 req 04 val 1500 [ 697.208971][ T7] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 697.219698][ T4257] pwc: recv_control_msg error -32 req 02 val 2500 [ 697.227865][ T7] dvb_usb_cxusb: probe of 5-1:0.30 failed with error -22 [ 697.256559][ T7] usb 5-1: USB disconnect, device number 23 [ 697.489843][ T4257] pwc: recv_control_msg error -71 req 02 val 2600 [ 697.509707][ T4257] pwc: recv_control_msg error -71 req 02 val 2900 [ 697.529847][ T4257] pwc: recv_control_msg error -71 req 02 val 2800 [ 697.557302][ T4257] pwc: recv_control_msg error -71 req 04 val 1100 [ 697.589700][ T4257] pwc: recv_control_msg error -71 req 04 val 1200 [ 697.613018][ T4257] pwc: Registered as video103. [ 697.625864][ T4257] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 697.691486][ T4257] usb 3-1: USB disconnect, device number 31 [ 697.842464][T14918] netlink: zone id is out of range [ 697.880802][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 697.891115][T14918] netlink: zone id is out of range [ 697.907296][T14918] netlink: zone id is out of range [ 697.930586][T14918] netlink: zone id is out of range [ 697.948581][T14918] netlink: zone id is out of range [ 697.975129][T14918] netlink: zone id is out of range [ 697.997105][T14918] netlink: zone id is out of range [ 698.019006][T14918] netlink: zone id is out of range [ 698.049191][T14918] netlink: zone id is out of range [ 698.077342][T14918] netlink: zone id is out of range [ 699.581694][T13421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 699.592175][T13421] CPU: 0 PID: 13421 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 699.599857][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.610112][T13421] Workqueue: hci5 hci_rx_work [ 699.614810][T13421] Call Trace: [ 699.618114][T13421] [ 699.621101][T13421] dump_stack_lvl+0x188/0x250 [ 699.625828][T13421] ? show_regs_print_info+0x20/0x20 [ 699.631174][T13421] ? load_image+0x400/0x400 [ 699.635707][T13421] sysfs_create_dir_ns+0x26a/0x290 [ 699.640842][T13421] ? sysfs_warn_dup+0xa0/0xa0 [ 699.645543][T13421] ? process_one_work+0x85f/0x1010 [ 699.650671][T13421] ? do_raw_spin_unlock+0x11d/0x230 [ 699.655883][T13421] kobject_add_internal+0x6e0/0xd90 [ 699.661103][T13421] kobject_add+0x160/0x230 [ 699.665542][T13421] ? kobject_init+0x1d0/0x1d0 [ 699.670240][T13421] ? klist_children_get+0x50/0x50 [ 699.675278][T13421] ? get_device_parent+0x121/0x3f0 [ 699.680408][T13421] device_add+0x483/0xfb0 [ 699.684842][T13421] hci_conn_add_sysfs+0xd1/0x1e0 [ 699.689799][T13421] le_conn_complete_evt+0xc48/0x15c0 [ 699.695208][T13421] ? cs_le_create_conn+0x5e0/0x5e0 [ 699.700338][T13421] ? __mutex_trylock_common+0x155/0x260 [ 699.705904][T13421] hci_le_meta_evt+0x285/0x3c90 [ 699.710772][T13421] ? hci_event_packet+0x37b/0x1370 [ 699.715896][T13421] ? __lock_acquire+0x7d10/0x7d10 [ 699.720946][T13421] ? hci_remote_host_features_evt+0x280/0x280 [ 699.727032][T13421] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 699.732690][T13421] ? mark_lock+0x94/0x320 [ 699.737035][T13421] ? mutex_unlock+0x10/0x10 [ 699.741557][T13421] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 699.747554][T13421] ? lock_chain_count+0x20/0x20 [ 699.752429][T13421] ? __rwlock_init+0x140/0x140 [ 699.757214][T13421] hci_event_packet+0xe48/0x1370 [ 699.762166][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 699.767405][T13421] ? rcu_lock_release+0x20/0x20 [ 699.772388][T13421] ? hci_send_to_monitor+0x9c/0x4a0 [ 699.777622][T13421] hci_rx_work+0x255/0xa10 [ 699.782077][T13421] process_one_work+0x85f/0x1010 [ 699.787064][T13421] ? worker_detach_from_pool+0x240/0x240 [ 699.792720][T13421] ? lockdep_hardirqs_off+0x70/0x100 [ 699.798044][T13421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 699.803093][T13421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 699.808684][T13421] ? wq_worker_running+0x97/0x170 [ 699.813736][T13421] worker_thread+0xaa6/0x1290 [ 699.818534][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 699.823757][T13421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 699.829708][T13421] kthread+0x436/0x520 [ 699.834024][T13421] ? rcu_lock_release+0x20/0x20 [ 699.838917][T13421] ? kthread_blkcg+0xd0/0xd0 [ 699.843545][T13421] ret_from_fork+0x1f/0x30 [ 699.847998][T13421] [ 699.855966][T13421] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 699.869341][T13421] Bluetooth: hci5: failed to register connection device [ 701.162174][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3228'. [ 704.187305][T15054] netlink: 'syz.1.3248': attribute type 10 has an invalid length. [ 704.244387][T15054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 704.284025][T15054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 704.321294][T15054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 704.413843][ T7] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 704.481181][T13421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 704.490791][T13421] CPU: 0 PID: 13421 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 704.498574][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.508674][T13421] Workqueue: hci1 hci_rx_work [ 704.513421][T13421] Call Trace: [ 704.516727][T13421] [ 704.519683][T13421] dump_stack_lvl+0x188/0x250 [ 704.524400][T13421] ? show_regs_print_info+0x20/0x20 [ 704.529655][T13421] ? load_image+0x400/0x400 [ 704.534217][T13421] sysfs_create_dir_ns+0x26a/0x290 [ 704.539371][T13421] ? sysfs_warn_dup+0xa0/0xa0 [ 704.544213][T13421] ? process_one_work+0x85f/0x1010 [ 704.549363][T13421] ? do_raw_spin_unlock+0x11d/0x230 [ 704.554605][T13421] kobject_add_internal+0x6e0/0xd90 [ 704.559852][T13421] kobject_add+0x160/0x230 [ 704.564319][T13421] ? kobject_init+0x1d0/0x1d0 [ 704.569037][T13421] ? klist_children_get+0x50/0x50 [ 704.574102][T13421] ? get_device_parent+0x121/0x3f0 [ 704.579286][T13421] device_add+0x483/0xfb0 [ 704.583666][T13421] hci_conn_add_sysfs+0xd1/0x1e0 [ 704.588654][T13421] le_conn_complete_evt+0xc48/0x15c0 [ 704.593996][T13421] ? cs_le_create_conn+0x5e0/0x5e0 [ 704.599155][T13421] ? __mutex_trylock_common+0x155/0x260 [ 704.604743][T13421] hci_le_meta_evt+0x285/0x3c90 [ 704.609656][T13421] ? hci_event_packet+0x37b/0x1370 [ 704.614824][T13421] ? __lock_acquire+0x7d10/0x7d10 [ 704.619910][T13421] ? hci_remote_host_features_evt+0x280/0x280 [ 704.626019][T13421] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 704.631758][T13421] ? mark_lock+0x94/0x320 [ 704.636119][T13421] ? mutex_unlock+0x10/0x10 [ 704.640664][T13421] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 704.646689][T13421] ? lock_chain_count+0x20/0x20 [ 704.651670][T13421] ? __rwlock_init+0x140/0x140 [ 704.656475][T13421] hci_event_packet+0xe48/0x1370 [ 704.661457][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 704.666698][T13421] ? rcu_lock_release+0x20/0x20 [ 704.671593][T13421] ? hci_send_to_monitor+0x9c/0x4a0 [ 704.677442][T13421] hci_rx_work+0x255/0xa10 [ 704.681952][T13421] process_one_work+0x85f/0x1010 [ 704.686946][T13421] ? worker_detach_from_pool+0x240/0x240 [ 704.692614][T13421] ? lockdep_hardirqs_off+0x70/0x100 [ 704.697939][T13421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 704.703001][T13421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 704.708600][T13421] ? wq_worker_running+0x97/0x170 [ 704.713668][T13421] worker_thread+0xaa6/0x1290 [ 704.718391][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 704.723636][T13421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 704.729589][T13421] kthread+0x436/0x520 [ 704.733686][T13421] ? rcu_lock_release+0x20/0x20 [ 704.738571][T13421] ? kthread_blkcg+0xd0/0xd0 [ 704.743202][T13421] ret_from_fork+0x1f/0x30 [ 704.747676][T13421] [ 704.760822][T13421] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 704.774698][T13421] Bluetooth: hci1: failed to register connection device [ 704.782584][T13421] Bluetooth: hci1: link tx timeout [ 704.787779][T13421] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 704.869648][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 704.999892][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.019691][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.220956][T15070] loop4: detected capacity change from 0 to 512 [ 705.240660][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.271015][T15070] FAT-fs (loop4): Unrecognized mount option "00000000000000000000104" or missing value [ 705.275622][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.319411][ T7] usb 3-1: Product: syz [ 705.323932][ T7] usb 3-1: Manufacturer: syz [ 705.348880][ T7] usb 3-1: SerialNumber: syz [ 705.426903][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3254'. [ 705.721588][ T7] usb 3-1: 0:2 : does not exist [ 705.805052][ T7] usb 3-1: USB disconnect, device number 32 [ 705.883612][T13941] udevd[13941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.069353][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 706.350923][T15099] netlink: 'syz.4.3262': attribute type 10 has an invalid length. [ 706.407764][T15099] device syz_tun entered promiscuous mode [ 706.435813][T15099] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 706.534325][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 706.592149][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 706.622403][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 706.985352][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3269'. [ 707.162921][ T4257] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 707.329817][ T4301] Bluetooth: hci5: command 0x0406 tx timeout [ 707.529711][ T4257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.550920][ T4257] usb 5-1: config 0 interface 0 has no altsetting 0 [ 707.709797][ T4257] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 707.719146][ T4301] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 707.730425][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.747207][ T4257] usb 5-1: Product: syz [ 707.755404][ T4257] usb 5-1: Manufacturer: syz [ 707.765592][ T4257] usb 5-1: SerialNumber: syz [ 707.776651][ T4257] usb 5-1: config 0 descriptor?? [ 707.825107][ T4257] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 707.847320][ T4257] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 707.879943][ T4257] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 707.911006][ T4257] usb 5-1: media controller created [ 707.948517][ T4257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.000007][ T4301] usb 2-1: no configurations [ 708.006280][ T4301] usb 2-1: can't read configurations, error -22 [ 708.068810][ T4257] DVB: Unable to find symbol tda10046_attach() [ 708.076562][ T4257] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 708.089851][ T4257] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 708.179964][ T4301] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 708.297970][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3280'. [ 708.469957][ T4301] usb 2-1: no configurations [ 708.474675][ T4301] usb 2-1: can't read configurations, error -22 [ 708.499660][ T4301] usb usb2-port1: attempt power cycle [ 708.709761][ T13] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 708.800713][T15113] udc-core: couldn't find an available UDC or it's busy [ 708.814888][T15113] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.927253][ T4301] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 709.069883][ T4301] usb 2-1: no configurations [ 709.074549][ T4301] usb 2-1: can't read configurations, error -22 [ 709.103075][ T4257] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 709.115910][ T4257] usb 5-1: USB disconnect, device number 24 [ 709.139603][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.172027][ T13] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 709.200058][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.237400][ T13] usb 1-1: config 0 descriptor?? [ 709.246951][ T4301] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 709.281949][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 709.389951][ T4301] usb 2-1: no configurations [ 709.394663][ T4301] usb 2-1: can't read configurations, error -22 [ 709.418132][ T4301] usb usb2-port1: unable to enumerate USB device [ 709.719721][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 709.779744][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 709.839695][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 709.889744][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 709.939701][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 709.989692][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 710.040854][ T13] pwc: recv_control_msg error -32 req 02 val 2000 [ 710.099676][ T13] pwc: recv_control_msg error -32 req 02 val 2100 [ 710.140995][ T13] pwc: recv_control_msg error -32 req 04 val 1500 [ 710.182483][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3292'. [ 710.190257][ T13] pwc: recv_control_msg error -32 req 02 val 2500 [ 710.249722][ T13] pwc: recv_control_msg error -32 req 02 val 2400 [ 710.289940][ T13] pwc: recv_control_msg error -32 req 02 val 2600 [ 710.339816][ T13] pwc: recv_control_msg error -32 req 02 val 2900 [ 710.611070][ T13] pwc: recv_control_msg error -71 req 04 val 1100 [ 710.639703][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 710.650332][ T13] pwc: Registered as video103. [ 710.656488][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 711.412443][ T13] usb 1-1: USB disconnect, device number 38 [ 711.719652][ T7] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 712.839952][ T4257] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 712.909747][ T7] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 712.944759][ T7] usb 2-1: config 0 has no interface number 0 [ 712.975062][ T7] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 713.013901][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.045115][ T7] usb 2-1: config 0 descriptor?? [ 713.122591][ T7] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 713.138924][ T7] usb 2-1: setting power ON [ 713.154132][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 713.243144][ T4257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.260036][ T4257] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 713.313241][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.325114][T15187] netlink: 'syz.1.3296': attribute type 2 has an invalid length. [ 713.339624][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 713.367550][ T4257] usb 5-1: config 0 descriptor?? [ 713.446518][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 713.464959][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 713.514800][ T7] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 713.559638][ T7] dvb_usb_cxusb: probe of 2-1:0.30 failed with error -22 [ 713.598271][ T7] usb 2-1: USB disconnect, device number 49 [ 713.903148][ T4257] pwc: recv_control_msg error -32 req 02 val 2b00 [ 713.954957][ T4257] pwc: recv_control_msg error -32 req 02 val 2700 [ 714.013378][ T4257] pwc: recv_control_msg error -32 req 02 val 2c00 [ 714.064282][ T4257] pwc: recv_control_msg error -32 req 04 val 1000 [ 714.122976][ T4257] pwc: recv_control_msg error -32 req 04 val 1300 [ 714.342776][ T4257] pwc: recv_control_msg error -32 req 04 val 1400 [ 714.389700][ T4257] pwc: recv_control_msg error -32 req 02 val 2000 [ 714.479665][T15235] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 714.579646][ T7] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 714.839857][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 714.960177][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.036533][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.170278][ T4257] pwc: recv_control_msg error -32 req 02 val 2100 [ 715.229819][ T4257] pwc: recv_control_msg error -32 req 04 val 1500 [ 715.239865][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.258965][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.278183][ T7] usb 1-1: Product: syz [ 715.280153][ T4257] pwc: recv_control_msg error -32 req 02 val 2500 [ 715.297693][ T7] usb 1-1: Manufacturer: syz [ 715.307677][ T7] usb 1-1: SerialNumber: syz [ 715.339863][ T4257] pwc: recv_control_msg error -32 req 02 val 2400 [ 715.379695][ T4257] pwc: recv_control_msg error -32 req 02 val 2600 [ 715.419793][ T4257] pwc: recv_control_msg error -32 req 02 val 2900 [ 715.560972][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 715.730255][ T4257] pwc: recv_control_msg error -71 req 04 val 1100 [ 715.769819][ T4257] pwc: recv_control_msg error -71 req 04 val 1200 [ 715.786171][ T4257] pwc: Registered as video103. [ 715.828055][ T4257] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 715.901561][ T4257] usb 5-1: USB disconnect, device number 25 [ 715.989788][ T7] usb 1-1: 0:2 : does not exist [ 716.054217][ T7] usb 1-1: USB disconnect, device number 39 [ 716.302765][T13941] udevd[13941]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.733252][ T4257] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 717.143234][ T4257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.154138][ T4257] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 717.174135][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.212505][ T4257] usb 5-1: config 0 descriptor?? [ 717.253095][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 717.681557][ T4257] pwc: recv_control_msg error -32 req 02 val 2b00 [ 717.741526][ T4257] pwc: recv_control_msg error -32 req 02 val 2700 [ 717.779798][ T4257] pwc: recv_control_msg error -32 req 02 val 2c00 [ 717.844892][ T4257] pwc: recv_control_msg error -32 req 04 val 1000 [ 717.909922][ T4257] pwc: recv_control_msg error -32 req 04 val 1300 [ 717.960294][ T4257] pwc: recv_control_msg error -32 req 04 val 1400 [ 717.968017][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 718.002024][ T4257] pwc: recv_control_msg error -32 req 02 val 2000 [ 718.049984][ T7] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 718.061021][ T4257] pwc: recv_control_msg error -32 req 02 val 2100 [ 718.131079][ T4257] pwc: recv_control_msg error -32 req 04 val 1500 [ 718.190531][ T4257] pwc: recv_control_msg error -32 req 02 val 2500 [ 718.229804][ T4257] pwc: recv_control_msg error -32 req 02 val 2400 [ 718.279813][ T4257] pwc: recv_control_msg error -32 req 02 val 2600 [ 718.294188][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 718.320065][ T4257] pwc: recv_control_msg error -32 req 02 val 2900 [ 718.419859][ T7] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.441240][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 718.448021][ T7] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 718.483033][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.502702][ T7] usb 1-1: config 0 descriptor?? [ 718.600933][ T4257] pwc: recv_control_msg error -71 req 04 val 1100 [ 718.639857][ T4257] pwc: recv_control_msg error -71 req 04 val 1200 [ 718.655158][ T4257] pwc: Registered as video103. [ 718.670836][ T4257] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 718.712046][ T4257] usb 5-1: USB disconnect, device number 26 [ 719.008149][ T7] hid-generic 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 719.171112][T15318] xt_hashlimit: size too large, truncated to 1048576 [ 719.190971][T15318] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 719.254334][T15318] 8021q: VLANs not supported on ip6tnl0 [ 719.509058][ T7] usb 1-1: USB disconnect, device number 40 [ 719.584986][T15333] netlink: 'syz.4.3346': attribute type 10 has an invalid length. [ 719.653647][T15333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 719.686651][T15333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 719.709224][T15333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 719.943901][T15343] loop4: detected capacity change from 0 to 128 [ 720.070512][T15343] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 720.135803][T15343] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 720.163193][T15343] ext2 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.426553][T15355] xt_hashlimit: size too large, truncated to 1048576 [ 720.445363][T15355] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 720.470925][T15355] 8021q: VLANs not supported on ip6tnl0 [ 720.479695][ T4242] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 720.749619][ T4242] usb 5-1: Using ep0 maxpacket: 16 [ 720.770602][T15368] net_ratelimit: 95 callbacks suppressed [ 720.770627][T15368] IPv6: addrconf: prefix option has invalid lifetime [ 720.880119][ T4242] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.889641][ T4242] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 720.926503][ T4242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.938707][ T4242] usb 5-1: config 0 descriptor?? [ 721.116478][T15376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 721.169142][T15376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 721.200220][T15376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 721.432007][ T4242] hid (null): report_id 1657032860 is invalid [ 721.478707][T15384] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.543939][T15391] xt_hashlimit: size too large, truncated to 1048576 [ 721.573360][T15391] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 721.612662][T15384] 8021q: VLANs not supported on ip6tnl0 [ 721.652895][T11198] usb 5-1: USB disconnect, device number 27 [ 721.933990][T15409] overlayfs: failed to clone upperpath [ 722.269630][ T7] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 722.391291][T15426] ieee802154 phy0 wpan0: encryption failed: -22 [ 722.418794][T15426] xt_hashlimit: size too large, truncated to 1048576 [ 722.433361][T15426] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 722.462747][T15426] 8021q: VLANs not supported on ip6tnl0 [ 722.469840][ T7] usb 1-1: device descriptor read/64, error -71 [ 722.555906][T15434] loop4: detected capacity change from 0 to 256 [ 722.667840][T15434] FAT-fs (loop4): Directory bread(block 64) failed [ 722.696172][T15434] FAT-fs (loop4): Directory bread(block 65) failed [ 722.722937][T15434] FAT-fs (loop4): Directory bread(block 66) failed [ 722.745871][T15438] overlayfs: failed to clone upperpath [ 722.749972][ T7] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 722.763616][T15434] FAT-fs (loop4): Directory bread(block 67) failed [ 722.789961][T15434] FAT-fs (loop4): Directory bread(block 68) failed [ 722.809898][T15434] FAT-fs (loop4): Directory bread(block 69) failed [ 722.816644][T15434] FAT-fs (loop4): Directory bread(block 70) failed [ 722.849493][T15434] FAT-fs (loop4): Directory bread(block 71) failed [ 722.865581][T15434] FAT-fs (loop4): Directory bread(block 72) failed [ 722.887777][T15434] FAT-fs (loop4): Directory bread(block 73) failed [ 722.979782][ T7] usb 1-1: device descriptor read/64, error -71 [ 723.103053][ T7] usb usb1-port1: attempt power cycle [ 723.509840][ T7] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 723.670044][ T7] usb 1-1: device descriptor read/8, error -71 [ 723.950101][ T7] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 724.149898][ T7] usb 1-1: device descriptor read/8, error -71 [ 724.210471][ T4257] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 724.269824][ T7] usb usb1-port1: unable to enumerate USB device [ 724.279601][ T4242] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 724.559784][ T4242] usb 5-1: Using ep0 maxpacket: 16 [ 724.604981][ T4257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.625454][ T4257] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 724.644929][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.667986][ T4257] usb 3-1: config 0 descriptor?? [ 724.696187][ T4242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 724.717649][ T4242] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 724.729332][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 724.745529][ T4242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.772553][ T4242] usb 5-1: config 0 descriptor?? [ 725.052987][T15434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.083412][T15434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.115019][T15434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.135038][T15434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.162933][ T4257] pwc: recv_control_msg error -32 req 02 val 2b00 [ 725.230055][ T4257] pwc: recv_control_msg error -32 req 02 val 2700 [ 725.269729][ T4257] pwc: recv_control_msg error -32 req 02 val 2c00 [ 725.319846][ T4257] pwc: recv_control_msg error -32 req 04 val 1000 [ 725.359862][ T4257] pwc: recv_control_msg error -32 req 04 val 1300 [ 725.399777][ T4242] usbhid 5-1:0.0: can't add hid device: -71 [ 725.405840][ T4242] usbhid: probe of 5-1:0.0 failed with error -71 [ 725.412906][ T4257] pwc: recv_control_msg error -32 req 04 val 1400 [ 725.449727][ T4257] pwc: recv_control_msg error -32 req 02 val 2000 [ 725.468293][ T4242] usb 5-1: USB disconnect, device number 28 [ 725.489822][ T4257] pwc: recv_control_msg error -32 req 02 val 2100 [ 725.529705][ T4257] pwc: recv_control_msg error -32 req 04 val 1500 [ 725.579896][ T4257] pwc: recv_control_msg error -32 req 02 val 2500 [ 725.629700][ T4257] pwc: recv_control_msg error -32 req 02 val 2400 [ 725.649655][T15490] IPv6: addrconf: prefix option has invalid lifetime [ 725.689815][ T4257] pwc: recv_control_msg error -32 req 02 val 2600 [ 725.740090][ T4257] pwc: recv_control_msg error -32 req 02 val 2900 [ 725.991819][ T4257] pwc: recv_control_msg error -71 req 04 val 1100 [ 726.019803][ T4257] pwc: recv_control_msg error -71 req 04 val 1200 [ 726.040855][ T4257] pwc: Registered as video103. [ 726.069831][ T4257] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 726.139649][ T4257] usb 3-1: USB disconnect, device number 33 [ 726.677994][T15518] loop2: detected capacity change from 0 to 2048 [ 726.715177][T15518] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 726.715721][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 726.758993][T15518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.777212][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 726.794293][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 726.829735][ T4759] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 727.099788][ T4759] usb 2-1: Using ep0 maxpacket: 16 [ 727.170710][T15527] loop4: detected capacity change from 0 to 256 [ 727.220008][ T4759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.265846][ T4759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.313511][T15527] FAT-fs (loop4): Directory bread(block 64) failed [ 727.339684][T15527] FAT-fs (loop4): Directory bread(block 65) failed [ 727.364505][T15527] FAT-fs (loop4): Directory bread(block 66) failed [ 727.404316][T15527] FAT-fs (loop4): Directory bread(block 67) failed [ 727.431928][T15527] FAT-fs (loop4): Directory bread(block 68) failed [ 727.471284][ T4759] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.498528][ T4759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.508288][T15527] FAT-fs (loop4): Directory bread(block 69) failed [ 727.537704][ T4759] usb 2-1: Product: syz [ 727.542593][T15527] FAT-fs (loop4): Directory bread(block 70) failed [ 727.556402][ T4759] usb 2-1: Manufacturer: syz [ 727.563938][T15527] FAT-fs (loop4): Directory bread(block 71) failed [ 727.576650][ T4759] usb 2-1: SerialNumber: syz [ 727.589904][T15527] FAT-fs (loop4): Directory bread(block 72) failed [ 727.606894][T15527] FAT-fs (loop4): Directory bread(block 73) failed [ 727.929979][ T4759] usb 2-1: 0:2 : does not exist [ 727.943849][T15538] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 728.003345][ T4759] usb 2-1: USB disconnect, device number 50 [ 728.119678][ T9179] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 728.138177][T15536] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 728.173143][T15536] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 728.231243][T13941] udevd[13941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.380056][ T9179] usb 5-1: Using ep0 maxpacket: 16 [ 728.519905][ T9179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 728.559701][ T9179] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 728.604262][ T9179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.637382][T15549] IPv6: addrconf: prefix option has invalid lifetime [ 728.663379][ T9179] usb 5-1: config 0 descriptor?? [ 729.289821][ T9179] usbhid 5-1:0.0: can't add hid device: -71 [ 729.297590][ T9179] usbhid: probe of 5-1:0.0 failed with error -71 [ 729.318487][ T9179] usb 5-1: USB disconnect, device number 29 [ 729.409875][ T4257] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 729.769921][ T4257] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.797322][ T4257] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 729.829684][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.858343][ T4257] usb 1-1: config 0 descriptor?? [ 729.924455][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 730.010285][T15581] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.019045][T15585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 730.039817][T15582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 730.058495][T15582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 730.068764][T15582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 730.094453][T15577] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 730.108704][T15581] 8021q: VLANs not supported on ip6tnl0 [ 730.122770][T15577] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 730.159719][ T4257] pwc: send_video_command error -71 [ 730.164994][ T4257] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 730.199763][ T4257] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 730.234897][ T4257] usb 1-1: USB disconnect, device number 45 [ 730.537431][T15596] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 730.779693][ T4257] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 731.109855][T11198] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 731.149891][ T4257] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.165622][ T4257] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 731.176997][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.191659][ T4257] usb 1-1: config 0 descriptor?? [ 731.243695][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 731.362631][T11198] usb 2-1: Using ep0 maxpacket: 16 [ 731.380501][T15615] ieee802154 phy0 wpan0: encryption failed: -22 [ 731.401077][T15615] 8021q: VLANs not supported on ip6tnl0 [ 731.479977][T11198] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.499615][T11198] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.516745][T11198] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 731.538430][T11198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.568904][T11198] usb 2-1: config 0 descriptor?? [ 731.607534][T15625] loop4: detected capacity change from 0 to 1024 [ 731.669796][ T4257] pwc: recv_control_msg error -32 req 02 val 2b00 [ 731.719707][ T4257] pwc: recv_control_msg error -32 req 02 val 2700 [ 731.734389][T15625] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 731.759722][ T4257] pwc: recv_control_msg error -32 req 02 val 2c00 [ 731.827251][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3460'. [ 731.996274][T15625] netlink: zone id is out of range [ 732.265210][T15625] netlink: zone id is out of range [ 732.423322][T15625] netlink: zone id is out of range [ 732.623680][T15625] netlink: zone id is out of range [ 732.638346][T15625] netlink: zone id is out of range [ 732.644437][ T4257] pwc: recv_control_msg error -32 req 04 val 1000 [ 732.659776][T15625] netlink: zone id is out of range [ 732.665011][T15625] netlink: zone id is out of range [ 732.709855][ T4257] pwc: recv_control_msg error -32 req 04 val 1300 [ 732.716903][T15625] netlink: zone id is out of range [ 732.744149][T15625] netlink: zone id is out of range [ 732.762072][ T4257] pwc: recv_control_msg error -32 req 04 val 1400 [ 732.847585][T15646] loop2: detected capacity change from 0 to 128 [ 732.855253][ T4257] pwc: recv_control_msg error -32 req 02 val 2000 [ 732.901253][ T4257] pwc: recv_control_msg error -32 req 02 val 2100 [ 732.908450][T15646] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 732.923932][T11198] hid-generic 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 732.976292][T15646] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 732.987375][ T4257] pwc: recv_control_msg error -32 req 04 val 1500 [ 733.041960][ T4257] pwc: recv_control_msg error -32 req 02 val 2500 [ 733.051084][T15646] ext2 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.154980][T15611] loop1: detected capacity change from 0 to 512 [ 733.252070][T15611] EXT4-fs (loop1): Ignoring removed nobh option [ 733.260049][T15611] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 733.299816][ T4257] pwc: recv_control_msg error -71 req 02 val 2600 [ 733.310744][T15611] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3449: iget: bad i_size value: 38620345925642 [ 733.325922][ T4257] pwc: recv_control_msg error -71 req 02 val 2900 [ 733.369815][ T4257] pwc: recv_control_msg error -71 req 02 val 2800 [ 733.399729][ T4257] pwc: recv_control_msg error -71 req 04 val 1100 [ 733.416389][T15611] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3449: couldn't read orphan inode 15 (err -117) [ 733.431760][ T4257] pwc: recv_control_msg error -71 req 04 val 1200 [ 733.448211][ T4257] pwc: Registered as video103. [ 733.478832][ T4257] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 733.499649][T11198] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 733.522911][T15611] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,nodelalloc,,errors=continue. Quota mode: writeback. [ 733.556191][ T4257] usb 1-1: USB disconnect, device number 46 [ 733.717304][T15656] 8021q: VLANs not supported on ip6tnl0 [ 733.752327][T11198] usb 3-1: Using ep0 maxpacket: 16 [ 733.781415][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3467'. [ 733.872069][T11198] usb 3-1: config 0 interface 0 has no altsetting 0 [ 733.876851][ T4759] usb 2-1: USB disconnect, device number 51 [ 733.878861][T11198] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 733.926181][T11198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.110660][T11198] usb 3-1: config 0 descriptor?? [ 734.616259][T11198] hid (null): report_id 1657032860 is invalid [ 734.934737][T11198] usb 3-1: USB disconnect, device number 34 [ 735.090745][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3472'. [ 735.863011][T15679] net_ratelimit: 100 callbacks suppressed [ 735.863033][T15679] netlink: zone id is out of range [ 735.875664][T15679] netlink: zone id is out of range [ 735.881142][T15679] netlink: zone id is out of range [ 735.886461][T15679] netlink: zone id is out of range [ 735.892034][T15679] netlink: zone id is out of range [ 735.897270][T15679] netlink: zone id is out of range [ 735.902843][T15679] netlink: zone id is out of range [ 735.908108][T15679] netlink: zone id is out of range [ 735.920133][T15679] netlink: zone id is out of range [ 735.935029][T15679] netlink: zone id is out of range [ 736.110795][T15695] ieee802154 phy0 wpan0: encryption failed: -22 [ 736.162925][T15682] 8021q: VLANs not supported on ip6tnl0 [ 736.219034][T15697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3480'. [ 736.959865][ T4759] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 737.470142][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 737.655267][ T4759] usb 5-1: Using ep0 maxpacket: 16 [ 737.900410][ T4759] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.964236][ T9179] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 738.023977][ T4759] usb 5-1: config 0 interface 0 has no altsetting 0 [ 738.072658][ T4759] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 738.114763][T15724] loop2: detected capacity change from 0 to 1024 [ 738.126970][ T4759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.217130][ T4759] usb 5-1: config 0 descriptor?? [ 738.268504][T15724] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 738.409865][ T9179] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.423310][ T9179] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 738.437538][ T9179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.460788][ T9179] usb 2-1: config 0 descriptor?? [ 738.494361][ T9179] pwc: Askey VC010 type 2 USB webcam detected. [ 738.556737][T11205] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 738.582037][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 738.594990][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.603655][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 738.701977][ T9179] pwc: send_video_command error -71 [ 738.707259][ T9179] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 738.725378][ T9179] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 738.748063][ T9179] usb 2-1: USB disconnect, device number 52 [ 738.796114][ T4759] hid-generic 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 738.922059][T11205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.946737][T11205] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 738.978698][T11205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.021109][T11205] usb 1-1: config 0 descriptor?? [ 739.049386][T15709] loop4: detected capacity change from 0 to 512 [ 739.063738][T11205] pwc: Askey VC010 type 2 USB webcam detected. [ 739.110530][T15709] EXT4-fs (loop4): Ignoring removed nobh option [ 739.134913][T15709] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 739.174321][T15709] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.3483: iget: bad i_size value: 38620345925642 [ 739.241891][T15709] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3483: couldn't read orphan inode 15 (err -117) [ 739.302326][T15709] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,nodelalloc,,errors=continue. Quota mode: writeback. [ 739.369777][ T9179] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 739.499701][T11205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 739.539647][T11205] pwc: recv_control_msg error -32 req 02 val 2700 [ 739.579687][T11205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 739.619716][T11205] pwc: recv_control_msg error -32 req 04 val 1000 [ 739.654319][T11198] usb 5-1: USB disconnect, device number 30 [ 739.660641][T11205] pwc: recv_control_msg error -32 req 04 val 1300 [ 739.719686][T11205] pwc: recv_control_msg error -32 req 04 val 1400 [ 739.762989][T11205] pwc: recv_control_msg error -32 req 02 val 2000 [ 740.029977][ T9179] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.211661][ T9179] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 740.479573][ T9179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.547002][ T9179] usb 2-1: config 0 descriptor?? [ 740.611948][T11205] pwc: recv_control_msg error -32 req 02 val 2100 [ 740.634363][ T9179] usb 2-1: can't set config #0, error -71 [ 740.649703][T11205] pwc: recv_control_msg error -32 req 04 val 1500 [ 740.670692][ T9179] usb 2-1: USB disconnect, device number 53 [ 740.691856][T11205] pwc: recv_control_msg error -32 req 02 val 2500 [ 740.772248][T11205] pwc: recv_control_msg error -32 req 02 val 2400 [ 740.793172][T15770] loop2: detected capacity change from 0 to 1024 [ 740.809743][T11205] pwc: recv_control_msg error -32 req 02 val 2600 [ 740.849683][T11205] pwc: recv_control_msg error -32 req 02 val 2900 [ 740.978782][T15770] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 741.053348][T15770] net_ratelimit: 208 callbacks suppressed [ 741.053366][T15770] netlink: zone id is out of range [ 741.065050][T15770] netlink: zone id is out of range [ 741.070446][T15770] netlink: zone id is out of range [ 741.075583][T15770] netlink: zone id is out of range [ 741.081111][T15770] netlink: zone id is out of range [ 741.086358][T15770] netlink: zone id is out of range [ 741.092826][T15770] netlink: zone id is out of range [ 741.098022][T15770] netlink: zone id is out of range [ 741.109072][T15770] netlink: zone id is out of range [ 741.114503][T11205] pwc: recv_control_msg error -71 req 04 val 1100 [ 741.116098][T15770] netlink: zone id is out of range [ 741.159712][T11205] pwc: recv_control_msg error -71 req 04 val 1200 [ 741.203858][T11205] pwc: Registered as video103. [ 741.237492][T11205] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 741.417848][T11205] usb 1-1: USB disconnect, device number 47 [ 741.903831][T13421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 741.915002][T13421] CPU: 1 PID: 13421 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 741.922675][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.932759][T13421] Workqueue: hci1 hci_rx_work [ 741.937485][T13421] Call Trace: [ 741.940803][T13421] [ 741.943765][T13421] dump_stack_lvl+0x188/0x250 [ 741.948481][T13421] ? show_regs_print_info+0x20/0x20 [ 741.953715][T13421] ? load_image+0x400/0x400 [ 741.958260][T13421] sysfs_create_dir_ns+0x26a/0x290 [ 741.963403][T13421] ? sysfs_warn_dup+0xa0/0xa0 [ 741.968176][T13421] ? process_one_work+0x85f/0x1010 [ 741.973322][T13421] ? do_raw_spin_unlock+0x11d/0x230 [ 741.978562][T13421] kobject_add_internal+0x6e0/0xd90 [ 741.983799][T13421] kobject_add+0x160/0x230 [ 741.988243][T13421] ? kobject_init+0x1d0/0x1d0 [ 741.992943][T13421] ? klist_children_get+0x50/0x50 [ 741.997984][T13421] ? get_device_parent+0x121/0x3f0 [ 742.003119][T13421] device_add+0x483/0xfb0 [ 742.007492][T13421] hci_conn_add_sysfs+0xd1/0x1e0 [ 742.012452][T13421] le_conn_complete_evt+0xc48/0x15c0 [ 742.017774][T13421] ? cs_le_create_conn+0x5e0/0x5e0 [ 742.022907][T13421] ? __switch_to_asm+0x34/0x60 [ 742.027702][T13421] ? __mutex_trylock_common+0x155/0x260 [ 742.033280][T13421] hci_le_meta_evt+0x285/0x3c90 [ 742.038150][T13421] ? hci_event_packet+0x37b/0x1370 [ 742.043299][T13421] ? __lock_acquire+0x7d10/0x7d10 [ 742.048351][T13421] ? release_firmware_map_entry+0x190/0x190 [ 742.054446][T13421] ? hci_remote_host_features_evt+0x280/0x280 [ 742.060548][T13421] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 742.066194][T13421] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 742.072256][T13421] ? mutex_unlock+0x10/0x10 [ 742.076776][T13421] ? lock_chain_count+0x20/0x20 [ 742.081656][T13421] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 742.087309][T13421] hci_event_packet+0xe48/0x1370 [ 742.092270][T13421] ? rcu_lock_release+0x20/0x20 [ 742.097137][T13421] ? kasan_check_range+0x84/0x290 [ 742.102185][T13421] ? hci_send_to_monitor+0x9c/0x4a0 [ 742.107410][T13421] hci_rx_work+0x255/0xa10 [ 742.111864][T13421] process_one_work+0x85f/0x1010 [ 742.116833][T13421] ? worker_detach_from_pool+0x240/0x240 [ 742.122486][T13421] ? lockdep_hardirqs_off+0x70/0x100 [ 742.127794][T13421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 742.132837][T13421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 742.138414][T13421] ? wq_worker_running+0x97/0x170 [ 742.143454][T13421] worker_thread+0xaa6/0x1290 [ 742.148191][T13421] ? lockdep_hardirqs_on+0x94/0x140 [ 742.153506][T13421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 742.159551][T13421] kthread+0x436/0x520 [ 742.163668][T13421] ? rcu_lock_release+0x20/0x20 [ 742.168544][T13421] ? kthread_blkcg+0xd0/0xd0 [ 742.173173][T13421] ret_from_fork+0x1f/0x30 [ 742.177629][T13421] [ 742.186148][T13421] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 742.199578][T13421] Bluetooth: hci1: failed to register connection device [ 742.206788][ T4201] Bluetooth: hci1: link tx timeout [ 742.212250][ T4201] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 742.221005][ T4201] Bluetooth: hci1: link tx timeout [ 742.226180][ T4201] Bluetooth: hci1: killing stalled connection 00:00:00:00:00:00 [ 742.240003][ T4201] Bluetooth: hci1: killing stalled connection 00:00:00:00:00:00 [ 742.247948][ T4201] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 742.329719][ T4242] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 742.700220][ T4242] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.723196][ T4242] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.164091][T15830] loop2: detected capacity change from 0 to 1024 [ 743.269883][ T4242] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 743.286722][T15830] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 743.333083][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.382161][ T4242] usb 1-1: Product: syz [ 743.563913][ T4242] usb 1-1: Manufacturer: syz [ 743.569052][ T4242] usb 1-1: SerialNumber: syz [ 743.576613][ T4242] usb 1-1: config 0 descriptor?? [ 743.730737][T11198] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 744.089782][T11198] usb 2-1: Using ep0 maxpacket: 16 [ 744.309731][T11198] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.356282][T11198] usb 2-1: config 0 interface 0 has no altsetting 0 [ 744.393731][T11198] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 744.413970][ T9179] Bluetooth: hci1: command 0x0406 tx timeout [ 744.480971][T11198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.508055][T15845] loop2: detected capacity change from 0 to 512 [ 744.517697][T11198] usb 2-1: config 0 descriptor?? [ 744.527470][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 744.540455][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 744.553925][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.570965][T15845] FAT-fs (loop2): Unrecognized mount option "00000000000000000000275" or missing value [ 745.064859][T11198] hid-generic 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 745.168335][T11198] usb 1-1: USB disconnect, device number 48 [ 745.368815][T15828] loop1: detected capacity change from 0 to 512 [ 745.422086][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 745.433457][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 745.441074][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.451265][ T4201] Workqueue: hci2 hci_rx_work [ 745.456003][ T4201] Call Trace: [ 745.459323][ T4201] [ 745.462286][ T4201] dump_stack_lvl+0x188/0x250 [ 745.467025][ T4201] ? show_regs_print_info+0x20/0x20 [ 745.472362][ T4201] ? load_image+0x400/0x400 [ 745.476959][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 745.482105][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 745.486802][ T4201] ? process_one_work+0x85f/0x1010 [ 745.491939][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 745.497185][ T4201] kobject_add_internal+0x6e0/0xd90 [ 745.502421][ T4201] kobject_add+0x160/0x230 [ 745.506872][ T4201] ? kobject_init+0x1d0/0x1d0 [ 745.511584][ T4201] ? klist_children_get+0x50/0x50 [ 745.516641][ T4201] ? get_device_parent+0x121/0x3f0 [ 745.521779][ T4201] device_add+0x483/0xfb0 [ 745.526149][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 745.531120][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 745.536443][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 745.541584][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 745.547167][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 745.552048][ T4201] ? hci_event_packet+0x37b/0x1370 [ 745.557183][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 745.562416][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 745.568533][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 745.574207][ T4201] ? mark_lock+0x94/0x320 [ 745.578567][ T4201] ? mutex_unlock+0x10/0x10 [ 745.583104][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 745.589123][ T4201] ? lock_chain_count+0x20/0x20 [ 745.594042][ T4201] ? __rwlock_init+0x140/0x140 [ 745.598846][ T4201] hci_event_packet+0xe48/0x1370 [ 745.603820][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 745.609148][ T4201] ? rcu_lock_release+0x20/0x20 [ 745.614024][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 745.619244][ T4201] hci_rx_work+0x255/0xa10 [ 745.623896][ T4201] process_one_work+0x85f/0x1010 [ 745.628871][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 745.634525][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 745.639868][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 745.644921][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 745.650486][ T4201] ? wq_worker_running+0x97/0x170 [ 745.655538][ T4201] worker_thread+0xaa6/0x1290 [ 745.660257][ T4201] kthread+0x436/0x520 [ 745.664340][ T4201] ? rcu_lock_release+0x20/0x20 [ 745.669210][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 745.673815][ T4201] ret_from_fork+0x1f/0x30 [ 745.678270][ T4201] [ 745.693565][ T4201] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 745.708067][ T4201] Bluetooth: hci2: failed to register connection device [ 745.729337][ T4201] ================================================================== [ 745.737935][ T4201] BUG: KASAN: use-after-free in l2cap_connect_cfm+0x6ff/0x10f0 [ 745.745665][ T4201] Read of size 8 at addr ffff88807b108488 by task kworker/u5:7/4201 [ 745.753691][ T4201] [ 745.756056][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 745.763638][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.773736][ T4201] Workqueue: hci2 hci_rx_work [ 745.778464][ T4201] Call Trace: [ 745.781775][ T4201] [ 745.784737][ T4201] dump_stack_lvl+0x188/0x250 [ 745.789475][ T4201] ? show_regs_print_info+0x20/0x20 [ 745.794725][ T4201] ? load_image+0x400/0x400 [ 745.799270][ T4201] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 745.804794][ T4201] ? __mutex_unlock_slowpath+0x658/0x6c0 [ 745.810485][ T4201] print_address_description+0x60/0x2d0 [ 745.816078][ T4201] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 745.821337][ T4201] kasan_report+0xdf/0x130 [ 745.825804][ T4201] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 745.831058][ T4201] l2cap_connect_cfm+0x6ff/0x10f0 [ 745.836183][ T4201] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 745.841520][ T4201] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 745.846856][ T4201] le_conn_complete_evt+0xd42/0x15c0 [ 745.852204][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 745.857363][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 745.862959][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 745.867852][ T4201] ? hci_event_packet+0x37b/0x1370 [ 745.873013][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 745.878093][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 745.884264][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 745.889953][ T4201] ? mark_lock+0x94/0x320 [ 745.894319][ T4201] ? mutex_unlock+0x10/0x10 [ 745.898868][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 745.904905][ T4201] ? lock_chain_count+0x20/0x20 [ 745.909802][ T4201] ? __rwlock_init+0x140/0x140 [ 745.914606][ T4201] hci_event_packet+0xe48/0x1370 [ 745.919580][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 745.924823][ T4201] ? rcu_lock_release+0x20/0x20 [ 745.929719][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 745.934971][ T4201] hci_rx_work+0x255/0xa10 [ 745.939446][ T4201] process_one_work+0x85f/0x1010 [ 745.944439][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 745.950123][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 745.955459][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 745.960526][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 745.966128][ T4201] ? wq_worker_running+0x97/0x170 [ 745.971221][ T4201] worker_thread+0xaa6/0x1290 [ 745.976003][ T4201] kthread+0x436/0x520 [ 745.980116][ T4201] ? rcu_lock_release+0x20/0x20 [ 745.985011][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 745.989642][ T4201] ret_from_fork+0x1f/0x30 [ 745.994126][ T4201] [ 745.997176][ T4201] [ 745.999524][ T4201] Allocated by task 4201: [ 746.003879][ T4201] __kasan_kmalloc+0xb5/0xf0 [ 746.008507][ T4201] l2cap_chan_create+0x4c/0x730 [ 746.013393][ T4201] l2cap_sock_alloc+0x13a/0x200 [ 746.018278][ T4201] l2cap_sock_new_connection_cb+0xd1/0x1c0 [ 746.024123][ T4201] l2cap_connect_cfm+0x35d/0x10f0 [ 746.029195][ T4201] le_conn_complete_evt+0xd42/0x15c0 [ 746.034518][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 746.039407][ T4201] hci_event_packet+0xe48/0x1370 [ 746.044487][ T4201] hci_rx_work+0x255/0xa10 [ 746.048948][ T4201] process_one_work+0x85f/0x1010 [ 746.053930][ T4201] worker_thread+0xaa6/0x1290 [ 746.058646][ T4201] kthread+0x436/0x520 [ 746.062753][ T4201] ret_from_fork+0x1f/0x30 [ 746.067208][ T4201] [ 746.069564][ T4201] Freed by task 15861: [ 746.073660][ T4201] kasan_set_track+0x4b/0x70 [ 746.078286][ T4201] kasan_set_free_info+0x1f/0x40 [ 746.083259][ T4201] ____kasan_slab_free+0xd5/0x110 [ 746.088329][ T4201] slab_free_freelist_hook+0xea/0x170 [ 746.093838][ T4201] kfree+0xef/0x2a0 [ 746.097673][ T4201] l2cap_sock_cleanup_listen+0xea/0x270 [ 746.103310][ T4201] l2cap_sock_release+0x66/0x1e0 [ 746.108293][ T4201] sock_close+0xd5/0x240 [ 746.112574][ T4201] __fput+0x234/0x930 [ 746.116594][ T4201] task_work_run+0x125/0x1a0 [ 746.121222][ T4201] exit_to_user_mode_loop+0x10f/0x130 [ 746.126641][ T4201] exit_to_user_mode_prepare+0xee/0x180 [ 746.132227][ T4201] syscall_exit_to_user_mode+0x16/0x40 [ 746.137738][ T4201] do_syscall_64+0x58/0xa0 [ 746.142201][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.148141][ T4201] [ 746.150505][ T4201] Last potentially related work creation: [ 746.156256][ T4201] kasan_save_stack+0x35/0x60 [ 746.160985][ T4201] kasan_record_aux_stack+0xb8/0x100 [ 746.166319][ T4201] call_rcu+0x189/0x950 [ 746.170505][ T4201] netlink_release+0x1369/0x17b0 [ 746.175510][ T4201] sock_close+0xd5/0x240 [ 746.179794][ T4201] __fput+0x234/0x930 [ 746.183811][ T4201] task_work_run+0x125/0x1a0 [ 746.188439][ T4201] exit_to_user_mode_loop+0x10f/0x130 [ 746.193884][ T4201] exit_to_user_mode_prepare+0xee/0x180 [ 746.199495][ T4201] syscall_exit_to_user_mode+0x16/0x40 [ 746.205024][ T4201] do_syscall_64+0x58/0xa0 [ 746.209591][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.215525][ T4201] [ 746.217881][ T4201] The buggy address belongs to the object at ffff88807b108000 [ 746.217881][ T4201] which belongs to the cache kmalloc-2k of size 2048 [ 746.232171][ T4201] The buggy address is located 1160 bytes inside of [ 746.232171][ T4201] 2048-byte region [ffff88807b108000, ffff88807b108800) [ 746.245669][ T4201] The buggy address belongs to the page: [ 746.251359][ T4201] page:ffffea0001ec4200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b108 [ 746.261559][ T4201] head:ffffea0001ec4200 order:3 compound_mapcount:0 compound_pincount:0 [ 746.269922][ T4201] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 746.277962][ T4201] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42000 [ 746.286607][ T4201] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 746.295223][ T4201] page dumped because: kasan: bad access detected [ 746.301673][ T4201] page_owner tracks the page as allocated [ 746.307405][ T4201] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13693, ts 643306887183, free_ts 643275571676 [ 746.328275][ T4201] get_page_from_freelist+0x1bbd/0x1ca0 [ 746.333874][ T4201] __alloc_pages+0x1ee/0x480 [ 746.338483][ T4201] new_slab+0xc0/0x4b0 [ 746.342569][ T4201] ___slab_alloc+0x80a/0xdd0 [ 746.347178][ T4201] __kmalloc+0x1cd/0x330 [ 746.351459][ T4201] sk_prot_alloc+0xe7/0x210 [ 746.356236][ T4201] sk_alloc+0x2f/0x310 [ 746.360320][ T4201] __netlink_create+0x6b/0x2d0 [ 746.365102][ T4201] netlink_create+0x3a7/0x510 [ 746.369882][ T4201] __sock_create+0x47b/0x900 [ 746.374487][ T4201] __sys_socket+0xe2/0x170 [ 746.379377][ T4201] __x64_sys_socket+0x76/0x80 [ 746.384067][ T4201] do_syscall_64+0x4c/0xa0 [ 746.388507][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.394417][ T4201] page last free stack trace: [ 746.399105][ T4201] free_unref_page_prepare+0x637/0x6c0 [ 746.404667][ T4201] free_unref_page+0x8f/0x2a0 [ 746.409365][ T4201] qlist_free_all+0x35/0x90 [ 746.413880][ T4201] kasan_quarantine_reduce+0x150/0x160 [ 746.419360][ T4201] __kasan_slab_alloc+0x2f/0xd0 [ 746.424225][ T4201] slab_post_alloc_hook+0x4c/0x380 [ 746.429374][ T4201] kmem_cache_alloc+0x100/0x290 [ 746.434236][ T4201] getname_flags+0xb5/0x500 [ 746.438763][ T4201] do_sys_openat2+0xdd/0x4b0 [ 746.443370][ T4201] __x64_sys_openat+0x135/0x160 [ 746.448233][ T4201] do_syscall_64+0x4c/0xa0 [ 746.452675][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.458590][ T4201] [ 746.460923][ T4201] Memory state around the buggy address: [ 746.466561][ T4201] ffff88807b108380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 746.474634][ T4201] ffff88807b108400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 746.482802][ T4201] >ffff88807b108480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 746.490876][ T4201] ^ [ 746.495217][ T4201] ffff88807b108500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 746.503292][ T4201] ffff88807b108580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 746.511446][ T4201] ================================================================== [ 746.519510][ T4201] Disabling lock debugging due to kernel taint [ 746.528256][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 746.562295][ T4201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 746.569556][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 746.578530][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.588619][ T4201] Workqueue: hci2 hci_rx_work [ 746.593347][ T4201] Call Trace: [ 746.596651][ T4201] [ 746.599603][ T4201] dump_stack_lvl+0x188/0x250 [ 746.604316][ T4201] ? show_regs_print_info+0x20/0x20 [ 746.609547][ T4201] ? load_image+0x400/0x400 [ 746.614096][ T4201] panic+0x2e5/0x810 [ 746.618035][ T4201] ? bpf_jit_dump+0xd0/0xd0 [ 746.622570][ T4201] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 746.628578][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 746.633453][ T4201] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 746.638684][ T4201] check_panic_on_warn+0x80/0xa0 [ 746.643689][ T4201] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 746.648930][ T4201] end_report+0x6d/0xf0 [ 746.653114][ T4201] kasan_report+0x102/0x130 [ 746.657646][ T4201] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 746.662878][ T4201] l2cap_connect_cfm+0x6ff/0x10f0 [ 746.667938][ T4201] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 746.673251][ T4201] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 746.678568][ T4201] le_conn_complete_evt+0xd42/0x15c0 [ 746.684152][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 746.689300][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 746.694878][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 746.699763][ T4201] ? hci_event_packet+0x37b/0x1370 [ 746.704913][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 746.709987][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 746.716084][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 746.721743][ T4201] ? mark_lock+0x94/0x320 [ 746.726091][ T4201] ? mutex_unlock+0x10/0x10 [ 746.730616][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 746.736611][ T4201] ? lock_chain_count+0x20/0x20 [ 746.741720][ T4201] ? __rwlock_init+0x140/0x140 [ 746.746725][ T4201] hci_event_packet+0xe48/0x1370 [ 746.751696][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 746.756927][ T4201] ? rcu_lock_release+0x20/0x20 [ 746.761815][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 746.767038][ T4201] hci_rx_work+0x255/0xa10 [ 746.771483][ T4201] process_one_work+0x85f/0x1010 [ 746.776444][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 746.782092][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 746.787393][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 746.792465][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 746.798117][ T4201] ? wq_worker_running+0x97/0x170 [ 746.803202][ T4201] worker_thread+0xaa6/0x1290 [ 746.807920][ T4201] kthread+0x436/0x520 [ 746.812000][ T4201] ? rcu_lock_release+0x20/0x20 [ 746.816869][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 746.821471][ T4201] ret_from_fork+0x1f/0x30 [ 746.825916][ T4201] [ 746.829186][ T4201] Kernel Offset: disabled [ 746.833524][ T4201] Rebooting in 86400 seconds..