last executing test programs: 6.527795328s ago: executing program 0 (id=1): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0xb8de, &(0x7f00000000c0)=0x0) r3 = eventfd(0x5) r4 = openat$cgroup_subtree(r0, &(0x7f0000000640), 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0x3cb000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x306) io_submit(r2, 0x7, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0xd, r1, &(0x7f0000000100)="058ec0dd32c10eb08c3dc4fc8bf58936170d2843ee6cb5a9e662132f8b76f7b883165e26bbcf1f2051925849cb4102fd82a556a387e2bc9cca4f052505122c2ab63c2b27664d086aced384a2d9e68f0047ed1a788893c2a3ab039fefe81b9606cbf7d05596f7e921daa74db198469c1b52059b7fb2ede26f4336d81135c6db6fa468aba7773ad54a3cc8bf6b8a4ce1b6ea8ceb55b49a8f3b0a5275501614119c1ddb4398f3db3b69d439e2e10449918df66b68a7c5731edf03c022087967cc313cc1fa3fee995a150d0f6dd34c7ab4944a9f89c4", 0xd4, 0xbf, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000440)="840bd7a6528f0f44fa996a8f9f294ee075137c0ef9d4fd772a0ad6aa6c66e0213c7cb534d3fbb638b5efff36d744b4a571165c725fd5d9d579fa6e42b8b43d4dc80c025e83364c7c3a1e6b7e80c37d7092b9573b3e54072d31e7f1722eeb2b9ba256886ab808efd0875c322984b7b101be0901e69cb2fcba355fcd5e989c9a0b4158fc400b54015f5db06f4b40c7b1e421d7ec5fab74e8905a5d7d1ecdf6e19193361909e826711acdaf1dd811b2fae98ccc6706f0c4c90b24f07c8e8768417b2c7a700f5390ef2d9942129206c25941", 0xd0, 0xd, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000d40)="ece5f0f13933f176ae1b26f2016dc2ff3a5292ccc28aa55c6e935c89c8385b18f0021fd2143623a7b6332d3a88012e825b0bce41016a902fabc51f0efbcde8584110e7fa727e14da835d677d0081f5dedb0b91004ac8cfa787c8151702d009785020f4c18b0b5f98f13fb931693e6d21737f1a7966073ddb6a3a0bf01dd43bb0396d8b201efbe1d2c64957d1e82ca34a6275b3211220bd83790b5bb4d16ff79220352a08faacc6b0188cf82491d6f00104a2bf46aa4c51244413e5272ccc5aeca39284f4c61597f14b3918256466eb8129350af64ccb34b88c14fd642b5132a12e52f4d8a6faec49e76d42984f0ec472d4f27126aee0069f441fb04f5945e5bc12271912af7a2dfda1306340b929ac8e1ae3264fae3a1e", 0x117, 0x4, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f0000000680)="31d4c0e0dc32bfa8cfa5f0fadc28e01a84f5ae9225e795847617f06d5ae8211c307113aab53e4bbef31a67bcbb5cd3b0460c4c56fee2020712d223834dae70dc1164bda112479689a5841bff4b6066bbbbe2ceb57161bbca9560a5749d95906b57ef0c5ad0d71cc0d2247f526256d3c821a7992d0a809ede9145f3a5c885c5a46462fa4a396c06ad038fa8f5b0cf4fdce5319a3b4ddfe86ef40887b7b3a152b011767f9be209c0348a2c0e2de0835409d406b6548c31befa7387fdc33b72547e9241d92d5a9eccd900042ccdc0eba99f29a2d5cd854dbe5cd868740f3e48ec38d4d6e0df03", 0xe5, 0x40, 0x0, 0x0, r5}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000800)="c75f32347c58c9911d4d8187d65093160606ab1b656cebd2fa3809b790b0b6a2a2e8d073c4d19e3dcd94e44e4d11a733a79676070aebc78f2fa47a586ebf8b93bb5314d376a8f98abbf0ea1f58f6d7c6a0712550d94a8aa496e9247bf9703a89e6e858c40ba2b508fdfcc180a60271447f0958a1d53f8ac0d2854ebbf36e8a595af3645c", 0x84, 0xffffffffffffffff, 0x0, 0x3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x2, r6, &(0x7f0000000c00)="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", 0x120, 0x9, 0x0, 0x4, r0}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f0000000a40)="9a6e9920b0284eebb09d0ab27366bf596c6a4631d01791597fa768b2f9c0737895e85148378b928b9427f3a9ab0654c93a6a2deafb11cfd6818c0b607f9359674907ae19fcb90d1ab28287a8c4cd49046438c74af9ac6e477b9f787d96d79eae16992b", 0x63, 0x32a1, 0x0, 0x2, r0}]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r7, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600010000001d5b0c6d2829c4b1a3d34e384fdd1d09a923b84cb11f7220c6451c0b4af6b12a53dc4e23d0020ff1be930ffad4f6979cb9e28b94679929897ea4ca461ddc405938c4e2e406"], 0x38}}, 0x0) listen(0xffffffffffffffff, 0x74) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000001e0000000100004914000180060001000200000008000300ac1414aa41beacb134c941171869467a1d5e8fb33ae72001f9ee4b07f314f654b26c8fc4e93597ae5b5703ea192debdbcf636f20fbf5ed43aaf50672ab067a3e5043f6af400d9199041626903cf762c6c3ba4cdfb055a4254e5eb9b653b6ddcd2127a14ceaf61fae"], 0x28}}, 0x0) 5.294514436s ago: executing program 0 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r1, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2000}, {0xc, 0x90, 0xd04}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8841}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x2, 0x7fffffff, {{0x2f, 0x4, 0x3, 0x1e, 0xbc, 0x66, 0x0, 0xf7, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x24, 0x29, 0x0, 0x6, [0x8, 0x3ff, 0x1, 0x8, 0x5, 0x0, 0x0, 0x5]}, @timestamp_addr={0x44, 0xc, 0x9a, 0x1, 0x4, [{@empty, 0x3ff}]}, @noop, @lsrr={0x83, 0x7, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @cipso={0x86, 0x3c, 0x3, [{0x1, 0xb, "8d22b926695e67787b"}, {0x2, 0x11, "e4a6c5099875778c3c2e87c07b61dc"}, {0x1, 0xd, "fe137546c3233dcbff39d5"}, {0x6, 0xd, "11627729b4574815325719"}]}, @cipso={0x86, 0x25, 0x2, [{0x7, 0xf, "5cc94d2eb058326c56cb19b8dc"}, {0x5, 0xe, "e865f4292d11d6cf1f4d947b"}, {0x5, 0x2}]}, @generic={0x94, 0xd, "f76f283ac24b4b4f02b779"}]}}}}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000280)={0x10000, r10}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f00000002c0)={0x400002, r10}) dup3(r10, r9, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x1, 0x4, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x66, 0x0, 0x85, 0x29, 0x0, @local, @local, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xe8, [@broadcast, @loopback, @loopback, @private=0xa010102]}]}}}}}) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000380)={0x1d, r13, 0x0, {0x0, 0x1, 0x3}, 0xfe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x5, {{0x37, 0x4, 0x1, 0x0, 0xdc, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@end, @timestamp_prespec={0x44, 0x4c, 0x63, 0x3, 0x5, [{@multicast2, 0x4}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0x6}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x18}, {@remote, 0x2b148454}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x28fb}, {@multicast2, 0x6}]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "ef24107b9ae486cf0a"}]}, @end, @timestamp_addr={0x44, 0x14, 0x8b, 0x1, 0x5, [{@rand_addr=0x64010102, 0x4ed}, {@empty, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x5f, 0x1, 0x5, [{@loopback, 0xfffffff8}, {@rand_addr=0x64010102, 0x9}]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x27, 0xdf, [@loopback, @remote, @loopback, @broadcast, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @remote, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0xbe, 0x3, 0x5, [{@loopback, 0x9}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x124, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x11) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r15, 0x89e6, &(0x7f0000000000)={0xf7, 0xb9}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) 4.320667825s ago: executing program 3 (id=4): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x30, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) 4.276145164s ago: executing program 2 (id=6): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24a, 0xab3, 0x1, 0x6, 0xfffffffffffffff4, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x7ffd, 0xe, 0x5d, 0x800, 0x3, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0xde2, 0xfffffdfffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x6, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0xd, 0x4, 0x0, 0x8000000000000000, 0x0, 0xca7, 0x5, 0x6, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0xf2, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7e, 0x40003, 0xb4000000, 0x0, 0x9, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0x5, 0xfffffffffffff36f, 0x4]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000480)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 3.93463748s ago: executing program 3 (id=7): clock_gettime(0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2958028, 0x0) r0 = mq_open(&(0x7f0000000140)=']@\x00', 0x40, 0x40, &(0x7f0000000180)={0x1, 0x7, 0xd, 0x10000}) mq_timedreceive(r0, 0x0, 0x0, 0x806, &(0x7f0000000240)={0x0, 0x3938700}) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='debugfs\x00', 0x219e0c8, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000280)) 3.93426994s ago: executing program 0 (id=8): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24a, 0xab3, 0x1, 0x6, 0xfffffffffffffff4, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x7ffd, 0xe, 0x5d, 0x800, 0x3, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0xde2, 0xfffffdfffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x6, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0xd, 0x4, 0x0, 0x8000000000000000, 0x0, 0xca7, 0x5, 0x6, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0xf2, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7e, 0x40003, 0xb4000000, 0x0, 0x9, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0x5, 0xfffffffffffff36f, 0x4]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000480)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) (fail_nth: 1) 3.540637471s ago: executing program 2 (id=9): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x4}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10163, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) unshare(0x22020600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 3.539892926s ago: executing program 1 (id=2): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355437c7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f00000006c0), 0x0, 0x105, 0x4}, {&(0x7f0000000340), 0x0, 0xa9a4, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6be", 0xed, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8841}, 0x40058d5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYRES32=r1], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r2, 0x0, 0x0, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) 3.266313883s ago: executing program 3 (id=10): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0xe22, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac7100206000000ffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) 3.142910609s ago: executing program 0 (id=11): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0xb8de, &(0x7f00000000c0)=0x0) r3 = eventfd(0x5) r4 = openat$cgroup_subtree(r0, &(0x7f0000000640), 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0x3cb000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x306) io_submit(r2, 0x7, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0xd, r1, &(0x7f0000000100)="058ec0dd32c10eb08c3dc4fc8bf58936170d2843ee6cb5a9e662132f8b76f7b883165e26bbcf1f2051925849cb4102fd82a556a387e2bc9cca4f052505122c2ab63c2b27664d086aced384a2d9e68f0047ed1a788893c2a3ab039fefe81b9606cbf7d05596f7e921daa74db198469c1b52059b7fb2ede26f4336d81135c6db6fa468aba7773ad54a3cc8bf6b8a4ce1b6ea8ceb55b49a8f3b0a5275501614119c1ddb4398f3db3b69d439e2e10449918df66b68a7c5731edf03c022087967cc313cc1fa3fee995a150d0f6dd34c7ab4944a9f89c4", 0xd4, 0xbf, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000440)="840bd7a6528f0f44fa996a8f9f294ee075137c0ef9d4fd772a0ad6aa6c66e0213c7cb534d3fbb638b5efff36d744b4a571165c725fd5d9d579fa6e42b8b43d4dc80c025e83364c7c3a1e6b7e80c37d7092b9573b3e54072d31e7f1722eeb2b9ba256886ab808efd0875c322984b7b101be0901e69cb2fcba355fcd5e989c9a0b4158fc400b54015f5db06f4b40c7b1e421d7ec5fab74e8905a5d7d1ecdf6e19193361909e826711acdaf1dd811b2fae98ccc6706f0c4c90b24f07c8e8768417b2c7a700f5390ef2d9942129206c25941", 0xd0, 0xd, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000d40)="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", 0x117, 0x4, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f0000000680)="31d4c0e0dc32bfa8cfa5f0fadc28e01a84f5ae9225e795847617f06d5ae8211c307113aab53e4bbef31a67bcbb5cd3b0460c4c56fee2020712d223834dae70dc1164bda112479689a5841bff4b6066bbbbe2ceb57161bbca9560a5749d95906b57ef0c5ad0d71cc0d2247f526256d3c821a7992d0a809ede9145f3a5c885c5a46462fa4a396c06ad038fa8f5b0cf4fdce5319a3b4ddfe86ef40887b7b3a152b011767f9be209c0348a2c0e2de0835409d406b6548c31befa7387fdc33b72547e9241d92d5a9eccd900042ccdc0eba99f29a2d5cd854dbe5cd868740f3e48ec38d4d6e0df03", 0xe5, 0x40, 0x0, 0x0, r5}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000800)="c75f32347c58c9911d4d8187d65093160606ab1b656cebd2fa3809b790b0b6a2a2e8d073c4d19e3dcd94e44e4d11a733a79676070aebc78f2fa47a586ebf8b93bb5314d376a8f98abbf0ea1f58f6d7c6a0712550d94a8aa496e9247bf9703a89e6e858c40ba2b508fdfcc180a60271447f0958a1d53f8ac0d2854ebbf36e8a595af3645c", 0x84, 0xffffffffffffffff, 0x0, 0x3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x2, r6, &(0x7f0000000c00)="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", 0x120, 0x9, 0x0, 0x4, r0}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f0000000a40)="9a6e9920b0284eebb09d0ab27366bf596c6a4631d01791597fa768b2f9c0737895e85148378b928b9427f3a9ab0654c93a6a2deafb11cfd6818c0b607f9359674907ae19fcb90d1ab28287a8c4cd49046438c74af9ac6e477b9f787d96d79eae16992b", 0x63, 0x32a1, 0x0, 0x2, r0}]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r7, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600010000001d5b0c6d2829c4b1a3d34e384fdd1d09a923b84cb11f7220c6451c0b4af6b12a53dc4e23d0020ff1be930ffad4f6979cb9e28b94679929897ea4ca461ddc405938c4e2e406"], 0x38}}, 0x0) listen(0xffffffffffffffff, 0x74) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000001e0000000100004914000180060001000200000008000300ac1414aa41beacb134c941171869467a1d5e8fb33ae72001f9ee4b07f314f654b26c8fc4e93597ae5b5703ea192debdbcf636f20fbf5ed43aaf50672ab067a3e5043f6af400d9199041626903cf762c6c3ba4cdfb055a4254e5eb9b653b6ddcd2127a14ceaf61fae"], 0x28}}, 0x0) 1.909132855s ago: executing program 2 (id=12): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x4}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x22020600) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 1.882993617s ago: executing program 0 (id=13): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x4}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10163, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) unshare(0x22020600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 1.130709213s ago: executing program 2 (id=14): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x30, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) 874.493038ms ago: executing program 3 (id=15): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = epoll_create1(0x80000) r5 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000080)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) getgroups(0x1, &(0x7f00000002c0)=[0xee00]) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) pipe(&(0x7f00000000c0)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 711.554169ms ago: executing program 2 (id=16): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) (async) close(r0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) (async) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (async) write$tun(r1, &(0x7f0000000380)={@val={0x0, 0x8917}, @void, @ipv4=@tipc={{0xb, 0x4, 0x2, 0x5, 0xa8, 0x66, 0x0, 0x9, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4, 0xe0, 0x1, 0x6}, @generic={0x86, 0x2}, @lsrr={0x83, 0xb, 0xf2, [@loopback, @remote]}, @ra={0x94, 0x4}]}}, @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x844, 0x0, 0x0, 0x8d, 0x1, 0x2, 0x4e24, 0x4e21, 0x1, 0x2, 0x0, 0x0, 0x1}, [{0x0, 0x1000, 0x1e, 0xcf42, 0xbe13, 0x5, 0x6, 0xc7}, {0xffffff72, 0xfffffffb, 0x8, 0x9, 0x27, 0x7, 0x6, 0xffff}, {0xe30, 0x10, 0x5, 0x7f, 0x6, 0x5, 0x8, 0x8000}]}}}, 0xac) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) 396.173534ms ago: executing program 1 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000191401"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=' ', 0x1}, {&(0x7f00000005c0)="7194b2515749095a629b93d09b8ea6bd6d3cfa278b68225d789622ad00ce773888b1c423d447ec11edab2a4b9ad4990ca99da75b6992c194289222e317e047a25bd5591018e7c257afa4572b52c27eb6e84e8348aea7840133ca5769f339d4a2f1d12cfee67ef1433078524c5ae7a6e222051cd64cc752538b3ae38eab02f5cf10f0b651675fc7618218e977891cba22d126fdd04b172c83061718194fd38f5cd38db5ff313daf", 0xa7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x4b0}], 0x1}}], 0x4, 0x2400c0a2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000001400)=[{0x6, 0x21, 0xfb, 0x8}, {0x4, 0x3, 0x40, 0xd3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x419, 0x80000, r6}) recvmsg$unix(r7, &(0x7f0000001780)={&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001700)}, 0x40002080) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r6, 0xb42, 0x80000}) writev(r3, &(0x7f0000001a80)=[{&(0x7f0000001800)="b046eca5b09eabe8127ae0713e1b1666af0ea4e596268b71709ec3954ea6c87033fd1ca290d61c2958b26e23e8c67cc7e547a6d5fa709e420648630fb22110b49adac7d23736d7e0eb0c0611774f623ab607ea4d7b844b42581e64dc975078a7afdb9303769f94c4", 0x68}, {&(0x7f0000001740)="10560dc903c05ebac889771d290bad06a22aa84abe367eb26f26fb4415110c6703ba9af184b5", 0x26}, {&(0x7f0000001880)="1df1e339ed278923246c46b7406b7ebc87ccb5af76a41ffc7be17e2f3790bbc079434a389b1599a187acf7a37e32b2c0965ec64e063005425c3a34dca1749d23a1f0d65017cc1fc42bcb483106ffd0766f51e921fc85e6c7f61fc66b22cf16a85aba10496f2efea0b0a1f8fde81554350832ed16e301baedaba65e8f82f53603d8148faf16dd5d85c178734a5cca31d20bbaef0c56ba7f1bf2136a017f2eff861bbccc747b015c4447cc4b25dc", 0xad}, {&(0x7f0000001940)="ceb7fb084a68722e861d3ee0f80bf60ecc58f35b15d993b814bd99db900a945a2849a05c63c5fea266df5f6bc53e3e1c05", 0x31}, {&(0x7f0000001980)="7905169f3cea77360567c9ac91ba288550552cf71d3a1915e219669f4104df1a87ff1134bb66469e7f39b74d6d30f04a923c293d07c839c13f8a46db244f19716ce022ca1f068a78b366159ae4fa8c88ffe35e5537fd49b9b88296d91ac6e2dd189f47ee83302895e844e9ba04c672789aab54548c7f8839d6218a1984ec669a077abf66b319a28bbfb0c61c5ca8ea61aff20eaf1822f465ee2d8b804927f8fa690070c0cab036eedb96eff8973978197a359e1dfc9d84ffd7caf624c95520a98979ecd4679265d4294655b606933f4962a8a22262a9fc929a727d0354371e1fbf276db3", 0xe4}], 0x5) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110ef00000040f003040040000102030109021b000101ff40070904000101070102f709050102000407080b"], &(0x7f0000001540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x4, 0x5, 0x2, 0x20, 0x2}, 0x30, &(0x7f0000001640)=ANY=[@ANYBLOB="050f3000100a40a20000001ef007000f3f0000003f00000a100302010000070d000a10030204000201d10003100b0000d5bf13ff66594f01b4e4a4cc7a884adb5c67c74dbbbc6a7eaa228ba8f9842e85df2381493dc64848bb96769cc2140364265a2f8417c99817e840d3ee610ba2751ce12582a149938735c853bcf1a41a8b490e7d14b1e67e3a80eb2383c4538ef705b34d2f516583e0b07871526df145752c141ec60c521c6e05dd04908f4b13fac194606489ca1fc1c077db0c8c8c6d2cf3f64a65b97d2332554c9f526928c726b67f78837c"], 0x4, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x1c0d}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x44d}}, {0x1b, &(0x7f00000014c0)=@string={0x1b, 0x3, "8be7b7bd4a631dc3a0b9db2872557bab854f3db5a7949cdc9f"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0xc07}}]}) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, 0xb}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xc1}}], 0x6b}, 0x200080c0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="240000002a00010062bdfffffedbdf25070000001300000008002a00", @ANYRES32=r9, @ANYBLOB="04001280"], 0x24}], 0x1}, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r7, 0x4068aea3, &(0x7f00000015c0)) 225.187275ms ago: executing program 0 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000191401"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=' ', 0x1}, {&(0x7f00000005c0)="7194b2515749095a629b93d09b8ea6bd6d3cfa278b68225d789622ad00ce773888b1c423d447ec11edab2a4b9ad4990ca99da75b6992c194289222e317e047a25bd5591018e7c257afa4572b52c27eb6e84e8348aea7840133ca5769f339d4a2f1d12cfee67ef1433078524c5ae7a6e222051cd64cc752538b3ae38eab02f5cf10f0b651675fc7618218e977891cba22d126fdd04b172c83061718194fd38f5cd38db5ff313daf", 0xa7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x4b0}], 0x1}}], 0x4, 0x2400c0a2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000001400)=[{0x6, 0x21, 0xfb, 0x8}, {0x4, 0x3, 0x40, 0xd3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x419, 0x80000, r7}) recvmsg$unix(r8, &(0x7f0000001780)={&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001700)}, 0x40002080) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r7, 0xb42, 0x80000}) writev(r3, &(0x7f0000001a80)=[{&(0x7f0000001800)="b046eca5b09eabe8127ae0713e1b1666af0ea4e596268b71709ec3954ea6c87033fd1ca290d61c2958b26e23e8c67cc7e547a6d5fa709e420648630fb22110b49adac7d23736d7e0eb0c0611774f623ab607ea4d7b844b42581e64dc975078a7afdb9303769f94c4", 0x68}, {&(0x7f0000001740)="10560dc903c05ebac889771d290bad06a22aa84abe367eb26f26fb4415110c6703ba9af184b5", 0x26}, {&(0x7f0000001880)="1df1e339ed278923246c46b7406b7ebc87ccb5af76a41ffc7be17e2f3790bbc079434a389b1599a187acf7a37e32b2c0965ec64e063005425c3a34dca1749d23a1f0d65017cc1fc42bcb483106ffd0766f51e921fc85e6c7f61fc66b22cf16a85aba10496f2efea0b0a1f8fde81554350832ed16e301baedaba65e8f82f53603d8148faf16dd5d85c178734a5cca31d20bbaef0c56ba7f1bf2136a017f2eff861bbccc747b015c4447cc4b25dc", 0xad}, {&(0x7f0000001940)="ceb7fb084a68722e861d3ee0f80bf60ecc58f35b15d993b814bd99db900a945a2849a05c63c5fea266df5f6bc53e3e1c05", 0x31}, {&(0x7f0000001980)="7905169f3cea77360567c9ac91ba288550552cf71d3a1915e219669f4104df1a87ff1134bb66469e7f39b74d6d30f04a923c293d07c839c13f8a46db244f19716ce022ca1f068a78b366159ae4fa8c88ffe35e5537fd49b9b88296d91ac6e2dd189f47ee83302895e844e9ba04c672789aab54548c7f8839d6218a1984ec669a077abf66b319a28bbfb0c61c5ca8ea61aff20eaf1822f465ee2d8b804927f8fa690070c0cab036eedb96eff8973978197a359e1dfc9d84ffd7caf624c95520a98979ecd4679265d4294655b606933f4962a8a22262a9fc929a727d0354371e1fbf276db3", 0xe4}], 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110ef00000040f003040040000102030109021b000101ff40070904000101070102f709050102000407080b"], &(0x7f0000001540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x4, 0x5, 0x2, 0x20, 0x2}, 0x30, &(0x7f0000001640)=ANY=[@ANYBLOB="050f3000100a40a20000001ef007000f3f0000003f00000a100302010000070d000a10030204000201d10003100b0000d5bf13ff66594f01b4e4a4cc7a884adb5c67c74dbbbc6a7eaa228ba8f9842e85df2381493dc64848bb96769cc2140364265a2f8417c99817e840d3ee610ba2751ce12582a149938735c853bcf1a41a8b490e7d14b1e67e3a80eb2383c4538ef705b34d2f516583e0b07871526df145752c141ec60c521c6e05dd04908f4b13fac194606489ca1fc1c077db0c8c8c6d2cf3f64a65b97d2332554c9f526928c726b67f78837c"], 0x4, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x1c0d}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x44d}}, {0x1b, &(0x7f00000014c0)=@string={0x1b, 0x3, "8be7b7bd4a631dc3a0b9db2872557bab854f3db5a7949cdc9f"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0xc07}}]}) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, 0xb}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xc1}}], 0x6b}, 0x200080c0) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="240000002a00010062bdfffffedbdf25070000001300000008002a00", @ANYRES32=r10, @ANYBLOB="04001280"], 0x24}], 0x1}, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r8, 0x4068aea3, &(0x7f00000015c0)) 0s ago: executing program 2 (id=19): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 71.909857][ T5602] cgroup: Unknown subsys name 'net' [ 72.150410][ T5602] cgroup: Unknown subsys name 'cpuset' [ 72.207117][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.760031][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.004964][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.009370][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.011654][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.013138][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.013824][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.108789][ T4930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.112221][ T4930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.118119][ T4930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.126045][ T4930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.137603][ T4930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.250604][ T4930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.277802][ T4930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.283577][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.295314][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.296188][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.322137][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.337145][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.338757][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.348000][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.350704][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.034768][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.035792][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.036123][ T5614] bridge_slave_0: entered allmulticast mode [ 78.039938][ T5614] bridge_slave_0: entered promiscuous mode [ 78.061931][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.062196][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.062766][ T5626] bridge_slave_0: entered allmulticast mode [ 78.065793][ T5626] bridge_slave_0: entered promiscuous mode [ 78.086642][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.086907][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.087125][ T5614] bridge_slave_1: entered allmulticast mode [ 78.093595][ T5614] bridge_slave_1: entered promiscuous mode [ 78.109592][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.109873][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.110092][ T5626] bridge_slave_1: entered allmulticast mode [ 78.113036][ T5626] bridge_slave_1: entered promiscuous mode [ 78.127837][ T4930] Bluetooth: hci0: command tx timeout [ 78.208024][ T4930] Bluetooth: hci1: command tx timeout [ 78.241977][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.263418][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.288587][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.288912][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.289122][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.289580][ T5618] bridge_slave_0: entered allmulticast mode [ 78.291954][ T5618] bridge_slave_0: entered promiscuous mode [ 78.305006][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.305336][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.305555][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.309974][ T5623] bridge_slave_0: entered allmulticast mode [ 78.313010][ T5623] bridge_slave_0: entered promiscuous mode [ 78.339584][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.339844][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.340054][ T5618] bridge_slave_1: entered allmulticast mode [ 78.344330][ T5618] bridge_slave_1: entered promiscuous mode [ 78.366998][ T4930] Bluetooth: hci2: command tx timeout [ 78.367965][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.368255][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.368481][ T5623] bridge_slave_1: entered allmulticast mode [ 78.371525][ T5623] bridge_slave_1: entered promiscuous mode [ 78.454059][ T5614] team0: Port device team_slave_0 added [ 78.456530][ T4930] Bluetooth: hci3: command tx timeout [ 78.475684][ T5626] team0: Port device team_slave_0 added [ 78.493526][ T5614] team0: Port device team_slave_1 added [ 78.498406][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.503075][ T5626] team0: Port device team_slave_1 added [ 78.509806][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.534496][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.554441][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.946078][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.946093][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.946117][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.984425][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.984440][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.984464][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.014744][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.014758][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.014782][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.020360][ T5618] team0: Port device team_slave_0 added [ 79.023133][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.023145][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.023168][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.030581][ T5623] team0: Port device team_slave_0 added [ 79.051861][ T5618] team0: Port device team_slave_1 added [ 79.068342][ T5623] team0: Port device team_slave_1 added [ 79.172397][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.172407][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.172419][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.196176][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.196190][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.196214][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.223289][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.223302][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.223326][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.248278][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.248291][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.248315][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.262099][ T5614] hsr_slave_0: entered promiscuous mode [ 79.264369][ T5614] hsr_slave_1: entered promiscuous mode [ 79.291366][ T5626] hsr_slave_0: entered promiscuous mode [ 79.294249][ T5626] hsr_slave_1: entered promiscuous mode [ 79.295995][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 79.296107][ T5626] Cannot create hsr debugfs directory [ 79.461391][ T5618] hsr_slave_0: entered promiscuous mode [ 79.462562][ T5618] hsr_slave_1: entered promiscuous mode [ 79.463548][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 79.463570][ T5618] Cannot create hsr debugfs directory [ 79.500491][ T5623] hsr_slave_0: entered promiscuous mode [ 79.502142][ T5623] hsr_slave_1: entered promiscuous mode [ 79.503079][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 79.503100][ T5623] Cannot create hsr debugfs directory [ 80.207916][ T4930] Bluetooth: hci0: command tx timeout [ 80.286638][ T4930] Bluetooth: hci1: command tx timeout [ 80.302523][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.338092][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.358555][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.394136][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.405758][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.430862][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.446960][ T4930] Bluetooth: hci2: command tx timeout [ 80.451008][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.489566][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.527658][ T4930] Bluetooth: hci3: command tx timeout [ 80.596117][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.630897][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.645009][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.672188][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.675610][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.713134][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.734710][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.771067][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.878359][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.909986][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.914201][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.950605][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.959341][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.991530][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.023279][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.058749][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.167681][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.215286][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.224964][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.259323][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.267428][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.301293][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.310137][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.349249][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.408918][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.492980][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.561535][ T32] cfg80211: failed to load regulatory.db [ 81.613361][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.613882][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.641413][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.712346][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.712448][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.837990][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.897734][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.915173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.915260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.955511][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.955643][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.007801][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.068936][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.081158][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.081675][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.141666][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.141855][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.244912][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.288247][ T4930] Bluetooth: hci0: command tx timeout [ 82.302150][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.302371][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.347117][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.347325][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.370978][ T4930] Bluetooth: hci1: command tx timeout [ 82.527657][ T4930] Bluetooth: hci2: command tx timeout [ 82.606671][ T4930] Bluetooth: hci3: command tx timeout [ 82.981739][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.340593][ T5614] veth0_vlan: entered promiscuous mode [ 83.382706][ T5614] veth1_vlan: entered promiscuous mode [ 83.495292][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.591434][ T5614] veth0_macvtap: entered promiscuous mode [ 83.621249][ T5614] veth1_macvtap: entered promiscuous mode [ 83.639073][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.736321][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.803384][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.804520][ T5623] veth0_vlan: entered promiscuous mode [ 83.839416][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.841709][ T2946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.871199][ T2946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875516][ T2946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.899860][ T5623] veth1_vlan: entered promiscuous mode [ 83.912939][ T2946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.973293][ T5618] veth0_vlan: entered promiscuous mode [ 84.150791][ T5618] veth1_vlan: entered promiscuous mode [ 84.331378][ T5623] veth0_macvtap: entered promiscuous mode [ 84.367351][ T4930] Bluetooth: hci0: command tx timeout [ 84.384079][ T5623] veth1_macvtap: entered promiscuous mode [ 84.415187][ T5626] veth0_vlan: entered promiscuous mode [ 84.446726][ T4930] Bluetooth: hci1: command tx timeout [ 84.489633][ T5618] veth0_macvtap: entered promiscuous mode [ 84.489944][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.489963][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.511798][ T5626] veth1_vlan: entered promiscuous mode [ 84.549704][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.550591][ T5618] veth1_macvtap: entered promiscuous mode [ 84.601505][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.607385][ T4930] Bluetooth: hci2: command tx timeout [ 84.609961][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.609978][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.657973][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.660577][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682248][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.686550][ T4930] Bluetooth: hci3: command tx timeout [ 84.704773][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.733938][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.873802][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.927477][ T5626] veth0_macvtap: entered promiscuous mode [ 84.994403][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.026894][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.124492][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.188476][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.190788][ T5626] veth1_macvtap: entered promiscuous mode [ 85.503962][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.503981][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.583658][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.654598][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.697449][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.697465][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.830300][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.842833][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.859554][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.923068][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.111190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.111208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.445526][ T5770] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.602394][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.602411][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.979096][ T2100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.979115][ T2100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.284553][ T3776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.284570][ T3776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.130644][ T5783] FAULT_INJECTION: forcing a failure. [ 88.130644][ T5783] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.130691][ T5783] CPU: 1 UID: 0 PID: 5783 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 88.130713][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.130730][ T5783] Call Trace: [ 88.130740][ T5783] [ 88.130749][ T5783] dump_stack_lvl+0xe8/0x150 [ 88.130777][ T5783] should_fail_ex+0x46b/0x600 [ 88.130803][ T5783] user_regset_copyin+0x18b/0x2a0 [ 88.130828][ T5783] xfpregs_set+0x157/0x3f0 [ 88.130845][ T5783] ? unwind_next_frame+0xa6/0x2550 [ 88.130869][ T5783] ? rcu_is_watching+0x15/0xb0 [ 88.130898][ T5783] ? __pfx_xfpregs_set+0x10/0x10 [ 88.130917][ T5783] ? __pfx_hlock_conflict+0x10/0x10 [ 88.130983][ T5783] ? task_user_regset_view+0x5c/0xa0 [ 88.131008][ T5783] ? ptrace_regset+0x353/0x400 [ 88.131033][ T5783] ptrace_request+0x137c/0x2380 [ 88.131070][ T5783] ? __pfx_ptrace_request+0x10/0x10 [ 88.131101][ T5783] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.131119][ T5783] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.131151][ T5783] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 88.131172][ T5783] ? lockdep_hardirqs_on+0x7a/0x110 [ 88.131191][ T5783] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 88.131210][ T5783] ? wait_task_inactive+0x430/0x7e0 [ 88.131244][ T5783] ? __pfx_wait_task_inactive+0x10/0x10 [ 88.131267][ T5783] ? rt_read_unlock+0x16d/0x220 [ 88.131297][ T5783] arch_ptrace+0x289/0x410 [ 88.131321][ T5783] __se_sys_ptrace+0x150/0x3a0 [ 88.131342][ T5783] ? __pfx___se_sys_ptrace+0x10/0x10 [ 88.131367][ T5783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.131387][ T5783] do_syscall_64+0x15f/0x560 [ 88.131407][ T5783] ? trace_irq_disable+0x3b/0x140 [ 88.131426][ T5783] ? clear_bhb_loop+0x40/0x90 [ 88.131458][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.131476][ T5783] RIP: 0033:0x7fd6ba42ce59 [ 88.131498][ T5783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.131514][ T5783] RSP: 002b:00007fd6b867e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 88.131537][ T5783] RAX: ffffffffffffffda RBX: 00007fd6ba6a5fa0 RCX: 00007fd6ba42ce59 [ 88.131551][ T5783] RDX: 0000000000000002 RSI: 000000000000000d RDI: 0000000000004205 [ 88.131562][ T5783] RBP: 00007fd6b867e090 R08: 0000000000000000 R09: 0000000000000000 [ 88.131574][ T5783] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 88.131586][ T5783] R13: 00007fd6ba6a6038 R14: 00007fd6ba6a5fa0 R15: 00007ffca3d523d8 [ 88.131612][ T5783] [ 88.881993][ T4930] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 89.250805][ T32] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 89.287687][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.449370][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 89.479373][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 89.479404][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58151, setting to 1024 [ 89.479566][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 89.479587][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.482450][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.486323][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 89.548571][ T32] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 89.548595][ T32] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 89.548613][ T32] usb 4-1: config 5 has no interface number 0 [ 89.554135][ T32] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 89.554161][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.554179][ T32] usb 4-1: Product: syz [ 89.554192][ T32] usb 4-1: Manufacturer: syz [ 89.554206][ T32] usb 4-1: SerialNumber: syz [ 89.631193][ T9] usb 2-1: config 0 descriptor?? [ 90.178281][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 90.178393][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 90.261614][ T9] usb 2-1: USB disconnect, device number 2 [ 90.464561][ T32] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 90.504471][ T2946] usb 4-1: Failed to submit usb control message: -71 [ 90.545495][ T2946] usb 4-1: unable to send the bmi data to the device: -71 [ 90.545519][ T2946] usb 4-1: unable to get target info from device [ 90.545545][ T2946] usb 4-1: could not get target info (-71) [ 90.546229][ T2946] usb 4-1: could not probe fw (-71) [ 90.779555][ T32] usb 4-1: USB disconnect, device number 2 [ 91.739550][ T5825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17'. [ 91.747370][ T5825] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 91.756702][ T5828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 91.906803][ T5828] mac80211_hwsim hwsim3 4: renamed from wlan1 (while UP) [ 91.945886][ T5820] ================================================================== [ 91.945901][ T5820] BUG: KASAN: slab-use-afte[ 91.945901][ T5820] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 91.945930][ T5820] Read of size 8 at addr ffff88803a783848 by task syz.3.15/5820 [ 91.945947][ T5820] [ 91.945958][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 91.945980][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.945992][ T5820] Call Trace: [ 91.946000][ T5820] [ 91.946017][ T5820] dump_stack_lvl+0xe8/0x150 [ 91.946047][ T5820] print_address_description+0x55/0x1e0 [ 91.946074][ T5820] ? clear_tfile_check_list+0x114/0x380 [ 91.946094][ T5820] print_report+0x58/0x70 [ 91.946117][ T5820] kasan_report+0x117/0x150 [ 91.946138][ T5820] ? clear_tfile_check_list+0x114/0x380 [ 91.946162][ T5820] clear_tfile_check_list+0x114/0x380 [ 91.946183][ T5820] ? clear_tfile_check_list+0x22/0x380 [ 91.946205][ T5820] do_epoll_ctl_file+0x8fd/0xed0 [ 91.946242][ T5820] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 91.946273][ T5820] ? __fget_files+0x3a6/0x420 [ 91.946299][ T5820] ? __fget_files+0x2a/0x420 [ 91.946329][ T5820] __se_sys_epoll_ctl+0x14e/0x210 [ 91.946349][ T5820] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 91.946369][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.946389][ T5820] do_syscall_64+0x15f/0x560 [ 91.946408][ T5820] ? trace_irq_disable+0x3b/0x140 [ 91.946427][ T5820] ? clear_bhb_loop+0x40/0x90 [ 91.946448][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.946467][ T5820] RIP: 0033:0x7f11e48ace59 [ 91.946482][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.946500][ T5820] RSP: 002b:00007f11e2ac4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 91.946520][ T5820] RAX: ffffffffffffffda RBX: 00007f11e4b26180 RCX: 00007f11e48ace59 [ 91.946535][ T5820] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 91.946546][ T5820] RBP: 00007f11e4942d6f R08: 0000000000000000 R09: 0000000000000000 [ 91.946558][ T5820] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 91.946571][ T5820] R13: 00007f11e4b26218 R14: 00007f11e4b26180 R15: 00007ffdb70996d8 [ 91.946592][ T5820] [ 91.946599][ T5820] [ 91.946603][ T5820] Allocated by task 5817: [ 91.946612][ T5820] kasan_save_track+0x3e/0x80 [ 91.946640][ T5820] __kasan_slab_alloc+0x6c/0x80 [ 91.946656][ T5820] kmem_cache_alloc_noprof+0x33b/0x680 [ 91.946673][ T5820] ep_insert+0x512/0x1820 [ 91.946688][ T5820] do_epoll_ctl_file+0x8bb/0xed0 [ 91.946716][ T5820] __se_sys_epoll_ctl+0x14e/0x210 [ 91.946732][ T5820] do_syscall_64+0x15f/0x560 [ 91.946749][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.946767][ T5820] [ 91.946771][ T5820] Freed by task 5817: [ 91.946779][ T5820] kasan_save_track+0x3e/0x80 [ 91.946805][ T5820] kasan_save_free_info+0x46/0x50 [ 91.946827][ T5820] __kasan_slab_free+0x5c/0x80 [ 91.946842][ T5820] kmem_cache_free+0x187/0x6c0 [ 91.946860][ T5820] eventpoll_release_file+0xc2/0x240 [ 91.946886][ T5820] __fput+0x83c/0xa70 [ 91.946909][ T5820] task_work_run+0x1d9/0x270 [ 91.946929][ T5820] exit_to_user_mode_loop+0xf3/0x4d0 [ 91.946947][ T5820] do_syscall_64+0x33e/0x560 [ 91.946965][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.946983][ T5820] [ 91.946987][ T5820] The buggy address belongs to the object at ffff88803a783840 [ 91.946987][ T5820] which belongs to the cache ep_head of size 16 [ 91.947010][ T5820] The buggy address is located 8 bytes inside of [ 91.947010][ T5820] freed 16-byte region [ffff88803a783840, ffff88803a783850) [ 91.947029][ T5820] [ 91.947034][ T5820] The buggy address belongs to the physical page: [ 91.947051][ T5820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803a783880 pfn:0x3a783 [ 91.947069][ T5820] memcg:ffff88803231f801 [ 91.947078][ T5820] flags: 0x80000000000200(workingset|node=0|zone=1) [ 91.947101][ T5820] page_type: f5(slab) [ 91.947119][ T5820] raw: 0080000000000200 ffff888140422c80 ffffea0000dffb90 ffff8880202eef88 [ 91.947136][ T5820] raw: ffff88803a783880 000000080080003c 00000000f5000000 ffff88803231f801 [ 91.947146][ T5820] page dumped because: kasan: bad access detected [ 91.947157][ T5820] page_owner tracks the page as allocated [ 91.947164][ T5820] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4983, tgid 4983 (udevd), ts 34773306822, free_ts 34767349010 [ 91.947194][ T5820] post_alloc_hook+0x1f9/0x250 [ 91.947222][ T5820] get_page_from_freelist+0x265c/0x26e0 [ 91.947243][ T5820] __alloc_frozen_pages_noprof+0x18d/0x380 [ 91.947260][ T5820] allocate_slab+0x74/0x5e0 [ 91.947283][ T5820] refill_objects+0x33c/0x3d0 [ 91.947305][ T5820] __pcs_replace_empty_main+0x373/0x720 [ 91.947329][ T5820] kmem_cache_alloc_noprof+0x433/0x680 [ 91.947345][ T5820] ep_insert+0x512/0x1820 [ 91.947358][ T5820] do_epoll_ctl_file+0x8bb/0xed0 [ 91.947383][ T5820] __se_sys_epoll_ctl+0x14e/0x210 [ 91.947398][ T5820] do_syscall_64+0x15f/0x560 [ 91.947416][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.947433][ T5820] page last free pid 29 tgid 29 stack trace: [ 91.947443][ T5820] __free_frozen_pages+0x10af/0x1190 [ 91.947461][ T5820] tlb_remove_table_rcu+0x85/0x100 [ 91.947481][ T5820] rcu_cpu_kthread+0x99e/0x1470 [ 91.947501][ T5820] smpboot_thread_fn+0x541/0xa50 [ 91.947530][ T5820] kthread+0x389/0x470 [ 91.947543][ T5820] ret_from_fork+0x514/0xb70 [ 91.947560][ T5820] ret_from_fork_asm+0x1a/0x30 [ 91.947584][ T5820] [ 91.947589][ T5820] Memory state around the buggy address: [ 91.947600][ T5820] ffff88803a783700: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 91.947612][ T5820] ffff88803a783780: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 91.947626][ T5820] >ffff88803a783800: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 91.947636][ T5820] ^ [ 91.947647][ T5820] ffff88803a783880: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 91.947658][ T5820] ffff88803a783900: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 91.947667][ T5820] ================================================================== [ 91.958651][ T5820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.958670][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 91.958693][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.958705][ T5820] Call Trace: [ 91.958712][ T5820] [ 91.958720][ T5820] vpanic+0x56c/0xa60 [ 91.958752][ T5820] ? __pfx_vpanic+0x10/0x10 [ 91.958779][ T5820] ? __pfx___schedule+0x10/0x10 [ 91.958811][ T5820] panic+0xc5/0xd0 [ 91.958836][ T5820] ? __pfx_panic+0x10/0x10 [ 91.958863][ T5820] ? preempt_schedule_thunk+0x16/0x40 [ 91.958896][ T5820] ? clear_tfile_check_list+0x114/0x380 [ 91.958916][ T5820] check_panic_on_warn+0x89/0xb0 [ 91.958938][ T5820] ? clear_tfile_check_list+0x114/0x380 [ 91.958957][ T5820] end_report+0x73/0x170 [ 91.958977][ T5820] ? clear_tfile_check_list+0x114/0x380 [ 91.958996][ T5820] kasan_report+0x128/0x150 [ 91.959015][ T5820] ? clear_tfile_check_list+0x114/0x380 [ 91.959042][ T5820] clear_tfile_check_list+0x114/0x380 [ 91.959063][ T5820] ? clear_tfile_check_list+0x22/0x380 [ 91.959085][ T5820] do_epoll_ctl_file+0x8fd/0xed0 [ 91.959117][ T5820] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 91.959147][ T5820] ? __fget_files+0x3a6/0x420 [ 91.959173][ T5820] ? __fget_files+0x2a/0x420 [ 91.959203][ T5820] __se_sys_epoll_ctl+0x14e/0x210 [ 91.959222][ T5820] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 91.959244][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.959264][ T5820] do_syscall_64+0x15f/0x560 [ 91.959284][ T5820] ? trace_irq_disable+0x3b/0x140 [ 91.959303][ T5820] ? clear_bhb_loop+0x40/0x90 [ 91.959323][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.959341][ T5820] RIP: 0033:0x7f11e48ace59 [ 91.959361][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.959378][ T5820] RSP: 002b:00007f11e2ac4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 91.959398][ T5820] RAX: ffffffffffffffda RBX: 00007f11e4b26180 RCX: 00007f11e48ace59 [ 91.959413][ T5820] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 91.959424][ T5820] RBP: 00007f11e4942d6f R08: 0000000000000000 R09: 0000000000000000 [ 91.959436][ T5820] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 91.959448][ T5820] R13: 00007f11e4b26218 R14: 00007f11e4b26180 R15: 00007ffdb70996d8 [ 91.959469][ T5820] [ 91.959711][ T5820] Kernel Offset: disabled