last executing test programs: 1m38.863841469s ago: executing program 0 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m37.272183816s ago: executing program 0 (id=296): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0x0, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x5, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0xffffffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0x0, 0x40000000000180, 0xffffffffffffffff, 0x80000000, 0xf2, 0x9, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x3, 0x4, 0x8], 0x25000, 0x344}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m33.315750458s ago: executing program 0 (id=302): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 1m29.115324506s ago: executing program 0 (id=313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180200008677000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m24.131722021s ago: executing program 0 (id=316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1m19.807917561s ago: executing program 0 (id=323): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500d08fa35ad31c7fb20000007722e565ce56fb733e13333243a3e203ab1451f02dbfb767f8e6f48972445227131bf9580d123c8fb8e2453b3dd67a6b4a42022a8a0d4b32222cc52407826b9145029743a7357b26c9fec58924e3c52b0e0eeff4579a7da6e3a97d21a8e70e1f6029811445", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 1m4.103889637s ago: executing program 32 (id=323): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500d08fa35ad31c7fb20000007722e565ce56fb733e13333243a3e203ab1451f02dbfb767f8e6f48972445227131bf9580d123c8fb8e2453b3dd67a6b4a42022a8a0d4b32222cc52407826b9145029743a7357b26c9fec58924e3c52b0e0eeff4579a7da6e3a97d21a8e70e1f6029811445", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 16.603007354s ago: executing program 2 (id=414): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 15.91879978s ago: executing program 3 (id=417): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 15.827804489s ago: executing program 3 (id=418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 15.750246107s ago: executing program 3 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0xffffffff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x28e7, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000240)=""/5, 0x5}], 0x1, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020052bbe1a4000010203010902240001010ad00309040000010301020809210000020122440f090581034000090505"], &(0x7f0000000880)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5, 0x80, 0x81, 0x10, 0x80}, 0x3c, &(0x7f0000000400)={0x5, 0xf, 0x3c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "cc866644c3090e2da75331527c0b0666"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x9, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0xc7, 0x3, 0x4, 0xff0f, 0x7, [0xc0, 0xff3fc0, 0xff0000]}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}, {0xbe, &(0x7f0000000700)=ANY=[@ANYBLOB="be0349a4a87480ea97c93921c00dc738f5521f551f5966a034a3695fbf2da45a6eb409e2e4306769d21372a2f78048f7273e02df4a2a68e12263fb7feee0172857a0c1755cf0b547893036871b60437b189968a99a1b3d1ddad03521ef43fcbb106ec28596ed52f8dfbc8767af4f48940ba8e3122cc218becde1473e95d0c382d1fef517d6c5eb0df3ade152b3e9d32270798724c4b21576bcfd0cf2473303f50b38ba6f2d29229a8767fb8887391044565baa83bc42a151c64edc"]}, {0x5, &(0x7f0000000540)=@string={0x5, 0x3, "74b3c3"}}, {0x95, &(0x7f00000007c0)=ANY=[@ANYBLOB="9503112b7fac32926b12890c81f7ec156ff33c2321ee63ef24b81d801a0124b15e5f62d0f4200e1eb5476643e76ccd647648b435c9449a9d413f93f34fb111ba8348d8a7964dfc494957308ec39842f1f0c4e6654d570da956b15decbca9a4e7e89329e18484174b8f47f1a2096777b90d6c25e2f40a91ea5e7ac223cadb801465fa44965f4a46c03166d32178450afeb610ad2080"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x410}}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x3, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) 14.897338783s ago: executing program 1 (id=420): socket$packet(0x11, 0x3, 0x300) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x5dcf0efdfdc212ab, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b13, 0x0) 13.183226231s ago: executing program 2 (id=421): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 12.342135499s ago: executing program 4 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)="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", 0xbfa}], 0x3, &(0x7f0000002400)=[{0xc10, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0xd48}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.116262283s ago: executing program 1 (id=424): socket$packet(0x11, 0x3, 0x300) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x5dcf0efdfdc212ab, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) msgget(0x2, 0x624) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b13, 0x0) 11.949796319s ago: executing program 2 (id=425): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500", 0x22}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum={0x5}, @union={0x6, 0x0, 0x0, 0x5, 0x1, 0x1}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x44, 0xa0, 0x1, 0xfffffff8}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.733377845s ago: executing program 4 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)="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", 0xff8}], 0x2, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "244df5680b8203b6b985638f2545f2ac042a9aee660edf5459c22ed1ed6026739f79e286a1f42ab62b2270f719c0ea01f4cfde2afa600b46d7d34e10f60c895126a9adf4a9885156ee2178974a935091e8c514514f31db8fcb6395a59a1710c7cff57d7f512eb909c22710e93086e706d2a3e4c1a121465944394844b45ed609c9fabb4edaf37a3df4d37a5ea7e027b1c5b22dd328957ae0b6f90667ae9f43322d694eebddddf7f23f1943855002a99e58c8402393d5a7dfd8d88cd1fcb86fe7aac690f8fcffa5b9dc3fdbb4822e588b7773ff35873a5ea7cc83b006d00e70987f313f1b9ba1b1b93ed3eb0362a138f2fba123982919b7aa914be8ba9c71a8d76f7045daafabfb4a50993005e0686440e9f97cc259b5350c86a0effdea17facf052b6772c96ea5fedb6b9497e591f51bd0e02ac86402d6f3fe7d0e856a69c6e3d49d89ba91e2fe519d5ac2186091766c178f274e81493af54a02f7e0b3e47c0a862bd7af9712e65f74595e8c63c91a45ebd081ad910d95f26192ead1daf401b015eb772f4b91bbacf26157d5d6d626eff439e238a6dd9ebce65fb960ae90ec490d5014589a24d107c8b66a587166ce85e9bffd332defeee0c3333d15ed629874fb3259217911d50a1eec22b3c205b3c2068bdbe9d0145de5536049af47bea81d4cffdc45b277e8c06249510d2d429cb3e606d27f40918bd250818d0a09512ed8a2727c81a38e44366deb7ca5e30556b03305ae54b19cc17f6a543a9d397676d1d18c873c30f02a873c6fe6cb1c21d0ebf78c1bc732ef62cbc92e71d461886c9fa5f04d28dc4c7e3b3ed55fb39603c041d27017322610ac1a16c63c91ed376d9bba0df833d185fff47bad911c26a5918034211a3dbe77663f21a22b4bed8a3cbabfcd5622a1bbc3c015d1890391c5f5f57ff316718f57d7927f41724ee25f274c98a22d8cc1f7348cdd5ff604f4fe21d50f21a1638a75b39c6a5e5c0470812e9e7a663f4f61e6f8b008d31c6e9bd4686a17e0f4fb42c06a19436731d612990f7dbdc2d9b6dd4a5152b8cdbef0906e6f6dd07ad305da2d579fb968b000ad7075c91d35f1af5c3783cbeb9306de0cb3f086a0e2950f564b6e1d0ff9bc785d53ed0176c3feaa5356559ebf4508bccc9202ee45d1c20f768f98f60aed75b7da8dba4f1c36a8b668e3a9a19eb431d4759a7b6840c888774194f60f872790fb243fdb2fb1184bc6dd225bfdb447cc1cfa5277569536d051e8069185956aaa7c34217597ab9c93e3ac647542aab63a11dce2a50d9ae996bb2477afc23d2456f36c58a8ca9308aea7548ea875ed4159d2df58cc3edcc0f1afd5fbed7e8fd540a9e97009a801e6d1397670d528f6c8ebbfce8ac7196efb13d05df6d95942f3a5f7629c857e558f0f408cfe6c5d7b9b3c07ac388904b79ffa7f947c0738b1722e6c817cb87cbee4d26d29ac34205523c121677cf55e891a681e9e4a1847ff29a8f440a427ebb9fa040f212b558c0932ad7f7e1115f48c52adcfbfb13ca9fe08f5507a74b04fee211674865f4ffa3f5cfba2fa7640a055efb6e848f4b6f9222bbe3b26a3721ddabc492c0586ca63fb03cc73007bef0e35606cfc629fa1c551eee50593712449e31c730042128ecdf57b35c79d040c6c23c663c5d30e2f3e711c8a9b9949814afee7117207a2b3ee989dd8edf72d997b3baa3ad5b700a8bf3c29d347094df4864bd4f4c234d5ef682b20f2664f7af13ec91c2490b0ddaff7cb2214d84a0a4486e6c51db48c21b6ef2bccf637bd589204716b019f976491ec9eedea1e67d48521a6e42cbc77c808e597a876226ba352c79e5f485ce3dd499f7eb22831a3951b70c5c869c90596fa211a1b9844c8a80e3fccaef546d08c4599f43b08bf198d8ed3b666088b191103f477bcf885bee9e280c9c126f1a2ddff0963ef5da8136f405dd5479e121fccbfa18c290acbee162a13006fcca07773a3da5db87b29c6ee7d66d2340bc053b83d600b5aaab198965f691aa52be98fda0998bb6a330f54575429a3cb7dcca97db0cdf3a2f1003514b1c213875e5306feb23a152898fd2cd25d4b93867018f713fd5d070846cd9981a489bd1b26ddc9c55a84d2d69d2687c5119cda5dffd0f425205aad0533f1bbef18df707d80422c3ce3f41382bf63906622250d2013552d40d97f2ef8bfca77331262e2989401b7644797bad8525f93754b54ad7098bfccb80540686972f7bc6aae896cd999c7bfdef03d14c013fbe14d2664cedbee82453ce9c0353142b5f8a2914572b1e59c072149b467a52979027666a0659c2e509dd6fd542d2410c42509ceca783d663c5c3813becb351d4a6f1602e40d047fedcbcdffad0c0b37f93bdce20ab98003cb718f613b6900aa252648e54d8b311ab249dfd548f5b60d2d8694f8aa1859b3c5c05f76d3f9b2de17a4a8328c7f5db363d9d161ad3de19b99781ce192ac0082d3b798d84f4bed0dd93ebdca87a6301c68ef57934f00089d3a2b943235633e22d3df2364917738a1cd3a3d3a16c682f087e5df2a7b91eb6fb6902ae15dcf48f5ca55d50015a9013fc9176cba5e37d75bc8d6a7cc72b8ad3fa2da84b31570d100499c7cafd1627c41bc0201f0954e8a8e26e876cd1b090af8d053735298d0d07a86e6d72988ad1f50a9897dc4382a9f6d5c651006e15dddc8951d543d0500adf8112de6767b075655b359407a9492e2076bd357592eda6479e6f37e55ce92024b4f791066f4e815ca5187caaf9870c10b1cdc7484d8f86185690f09c8af0fb222bc8f48e83837525f219cc7f2cef1b66bd392800103fc047dcc2dcfbb33fb4bfd2bd67dacbf66b80b6287f682b4c6b8c0d58cf4f9e3a9f69ea56f9e27e52cd21aab42f9f04eba3317f1927fbdd500e10acc508ff158346839d7e2ec004d9d25d5f785971940a329e89c89ee7575e34060ecdd5333071defcfd84abbf5787a5db4248e312b9f4955d3c767ec218e726fa2f46fbcd75dd6966efdac1ae06013cfcdbb62cb6be19ec96d883676995fb9e325a8c7bf5658806de9c8dd9ce0a7d1bea024c1aca7c1baaf3d5b0a68a8eb75996dc5ca3327dee4794d121d08cae66e2ca9c749c4956deeed5f5a341ae324a98185918c63d09c262acbc3f3190f224a555e133e2629eb7e21db87e075a92d4b3d02c0938c9d155c4816842a6b916b0c57f2c80ca53ecd39194eede230b3c9377b39c8f8d62ab9ca9eb2463e69003c34c9833165ed3063e4541bc5ee55ecb2164784648a1741e505c8609e868b29d52fb4a7ca2bc762ea0a127fdd7f14787faa5188afc8e74557213ec261b86a80227566141885b6a27ef42bc90e9615439ba996c5a47c22812ca7e790ff5b992185cc95438118d34e4e967863a93be631a7e20356b29b8d46fccc0d80feb218d368a8aeae7a7dc7d5005abf36013498fb177e2c8776cc8d1f606ef95217e0be7e18bd75e209427a05895b26354f140e9e1870fc52913d17e09f78e7beb3ce86b3b3f424086b68b5eb7dbb76d45441b7523ac1b7b2c423440886c946b7f9dc1e7baadb434f30a70908a46bb2fc70c5a4ff234d13c3c62065d31931b200426b38fe46cc82cab2d95fcb12ce95ef3910ed0270fe40e65fa6eac628c46abd2aceb604fb64390313ac734f793764e9fd6579591b8b9a87394a2dcb5fee88deadad3b4774cba87c5f2c75a6ab0f2da04a583b1e47da363ca00c7f9a4c7593d139acbefb6f6ec341079d6c713b5fbfd8237e186f2166d6619411092b82b7cf4f45953b33cfccb8fadc4ab5cde926b5a909ec288eb7a9089b8cceb1cef2ef299881bd2a107574325116a7f72d68b641c0ba04024df088606a51c619d7dc1fc924e269f46fb1e73db8b55da8f87e68e66ff52967e66d971acccf2bbf0d6beaa53eb2f1215e23f961dc7370cb05c23606a2c1628509f04448091964cee7ed1eb9c419788f8b6d50f7da0c8ab6d3c206910d345d4e5da8c751145616a9fbf13c9958e253200f4cc65c542486cfd5444aa0f29da078e44f3867f996a04989acc14de81468f7e465737e6394df89fa04793d75c1dd60047fef04717536562e7149c273dfb3587753115e67a18e3de27fa09158bf8e987011b7f227cc1fde527604bf5e5faea8ed9ed60ea18d5b74f4369437adcf590ebade205567c3c4900cef28e91761746d4b031dbe202143712fc31eb9382f9700c6b90b39d6cd382923d44f46401b5325871985cce1822514686d5483725fc89b9c51b43ef05342a3a5c58be8e4220dfdd08e1c46954a9600bf682b21a6734aec38dc4f80d8a8018f2b73bb881e8380e09ec76626524b93695842145408d82817a7fc6aa28818246a554ba9c544dcbb110252cccfbc7c0c0127b66711ee999aa55bd104792077698e569e8b019acebb1b22c0938898a09fa9eef45ebdbeadb9681b3279364484f9b2a22cb77980e0fadca6d102bab74ad40168fc0639fb84ccb6c97594f8be0d8c5565a7e95dbc26769393d54bba05d43f6e5889daeebdc4d907c479395e47ecba27d3e3be73e55a0ba18285879db493386b3c1c1cc9336f9c93b52539595e2da1ddbda556f0f2e5ed9270347d4d41733aaa648394286abf34c347eef0e760f38c51961f3ca4c8089afc6a680aaf1b3b09108dcc7b35f2d14a9bb47a97b7d263fb65f3af91c3a2649d5a62ad0fa19780a02ff8e1b57b422285cdd02727d07819646b45780c383672cd97c88f392357e6c11de8bd3119ba6e44a17e996c999ee73c1a6d125ca6c3dfbbf8c85432e0ed91426e508da52ec3fc54c50c67099ca1fc6f87960cae23d7373c44d66b295343cf3acd75a9bdc5adde2f57846e221611cdf4cff2a5965f1b4fa5dc0390d1e81c44dd619aaf48dbfb5c9f5be2cc3d4551a61ec91a1ad7c30226bbbd6d38f79df22676b42b4c213334c3ba10207289f812ebea67dc86de90a8e7c814e6c683a1fbed6a835c5d36afaf817d5da42726a41a60528c206943f288186821621dfc9274bc6780882b56e974221654db8bbd7172dfcb15ffb6b59297663f959fd238b7d915d42b281168caf23a6463136de6e66fcfa9c4034828f69796480ce756f309539e2ecdd89afb7e98fe0d69e97dce2a769a8966e274a6163bc86b14309adf01e435e8fc829833021a0dccf3d518d50b89ee206ee20c16c4b143dcf28c728e5ce73566c7caaa61b6fc004ee440410db26c683990181f6f02a168ef31aa513edf931dcf1b865ab684f9b6f400ae070af25f85d2340025b0e2aab778c21c7555d5e5f14f0cbd79d89571bc8ed6f0e66f3c22ebd919e0e2c5a1142f9f61e1222c4142e7ec5264e3bfda14759d92897bbe41af8742d02b46bbf2d526141133efe22c795acfaa16fb5700b661202d9a9b7b447e2fe33a64469e3b447fc399da62297205ab4a07311c7fe90234faf4bbd92c97e57af391d17f015bafdfccd59791bb2859a9790e47987093b6cb5a8ffbd83e54fcdfefc5ec153ec38732fb78d2f32ce9657faa17335da999e88564208fc752b264e09adbab145cd667b7672ea0e5b96c8b291d1950978859e73611ad19b34306754ca0ab3fd6e39728c99717747a6465982d85224e4a382a70e50a6dcb16ebddc7cf373c2ee2017964b4aebc55e1e8f783a2f423c1a65473defe7c84292512f7d25578e5196c9cafccae006542193ab20b5db94fc39ea77280438723d003383d0e37b6dff7fa43db29ba52a1235b63db868de9dc807321b74f7581f7de703433d29723eac4eebf5a26711f8e6592396d6bf5e30e87857a"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0xe0, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0"}], 0x1128}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.527035331s ago: executing program 3 (id=427): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000001c0)="bc12a749e4", 0x5, 0x84, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 11.371580845s ago: executing program 2 (id=428): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 11.290986486s ago: executing program 4 (id=429): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xc7e, 0x5, {r0}, {}, 0x7a, 0x3}) setresuid(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000002000000000000010000000000000000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r4, 0x0, 0x0) 10.006905023s ago: executing program 2 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0xffffffff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x28e7, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000240)=""/5, 0x5}], 0x1, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020052bbe1a4000010203010902240001010ad00309040000010301020809210000020122440f090581034000090505"], &(0x7f0000000880)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5, 0x80, 0x81, 0x10, 0x80}, 0x3c, &(0x7f0000000400)={0x5, 0xf, 0x3c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "cc866644c3090e2da75331527c0b0666"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x9, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0xc7, 0x3, 0x4, 0xff0f, 0x7, [0xc0, 0xff3fc0, 0xff0000]}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}, {0xbe, &(0x7f0000000700)=ANY=[@ANYBLOB="be0349a4a87480ea97c93921c00dc738f5521f551f5966a034a3695fbf2da45a6eb409e2e4306769d21372a2f78048f7273e02df4a2a68e12263fb7feee0172857a0c1755cf0b547893036871b60437b189968a99a1b3d1ddad03521ef43fcbb106ec28596ed52f8dfbc8767af4f48940ba8e3122cc218becde1473e95d0c382d1fef517d6c5eb0df3ade152b3e9d32270798724c4b21576bcfd0cf2473303f50b38ba6f2d29229a8767fb8887391044565baa83bc42a151c64edc"]}, {0x5, &(0x7f0000000540)=@string={0x5, 0x3, "74b3c3"}}, {0x95, &(0x7f00000007c0)=ANY=[@ANYBLOB="9503112b7fac32926b12890c81f7ec156ff33c2321ee63ef24b81d801a0124b15e5f62d0f4200e1eb5476643e76ccd647648b435c9449a9d413f93f34fb111ba8348d8a7964dfc494957308ec39842f1f0c4e6654d570da956b15decbca9a4e7e89329e18484174b8f47f1a2096777b90d6c25e2f40a91ea5e7ac223cadb801465fa44965f4a46c03166d32178450afeb610ad2080"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x410}}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x3, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) 9.688837783s ago: executing program 4 (id=431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40eaf000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80), 0x0, &(0x7f0000001d80), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 9.565860367s ago: executing program 3 (id=432): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200"/80], 0xf8}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 4.697792799s ago: executing program 1 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 4.641506013s ago: executing program 4 (id=434): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000180)=0x1) r2 = syz_io_uring_setup(0x873, &(0x7f00000000c0)={0x0, 0x369e, 0x100, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000c8c7}) io_uring_enter(r2, 0x3d16, 0x0, 0x0, 0x0, 0x0) 3.152977988s ago: executing program 1 (id=435): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0xc000486, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req={0x7, 0x25, 0xc, 0x8}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000000c0)=0x2, 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) 2.713605061s ago: executing program 1 (id=436): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x5, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030425bd70"], 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0x0, 0x40000000000180, 0xffffffffffffffff, 0x80000000, 0xf2, 0x9, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x3, 0x4, 0x8], 0x25000, 0x344}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.679896441s ago: executing program 2 (id=437): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500", 0x22}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum={0x5}, @union={0x6, 0x0, 0x0, 0x5, 0x1, 0x1}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x44, 0xa0, 0x1, 0xfffffff8}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.399727713s ago: executing program 1 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)="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", 0xff8}], 0x2, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "244df5680b8203b6b985638f2545f2ac042a9aee660edf5459c22ed1ed6026739f79e286a1f42ab62b2270f719c0ea01f4cfde2afa600b46d7d34e10f60c895126a9adf4a9885156ee2178974a935091e8c514514f31db8fcb6395a59a1710c7cff57d7f512eb909c22710e93086e706d2a3e4c1a121465944394844b45ed609c9fabb4edaf37a3df4d37a5ea7e027b1c5b22dd328957ae0b6f90667ae9f43322d694eebddddf7f23f1943855002a99e58c8402393d5a7dfd8d88cd1fcb86fe7aac690f8fcffa5b9dc3fdbb4822e588b7773ff35873a5ea7cc83b006d00e70987f313f1b9ba1b1b93ed3eb0362a138f2fba123982919b7aa914be8ba9c71a8d76f7045daafabfb4a50993005e0686440e9f97cc259b5350c86a0effdea17facf052b6772c96ea5fedb6b9497e591f51bd0e02ac86402d6f3fe7d0e856a69c6e3d49d89ba91e2fe519d5ac2186091766c178f274e81493af54a02f7e0b3e47c0a862bd7af9712e65f74595e8c63c91a45ebd081ad910d95f26192ead1daf401b015eb772f4b91bbacf26157d5d6d626eff439e238a6dd9ebce65fb960ae90ec490d5014589a24d107c8b66a587166ce85e9bffd332defeee0c3333d15ed629874fb3259217911d50a1eec22b3c205b3c2068bdbe9d0145de5536049af47bea81d4cffdc45b277e8c06249510d2d429cb3e606d27f40918bd250818d0a09512ed8a2727c81a38e44366deb7ca5e30556b03305ae54b19cc17f6a543a9d397676d1d18c873c30f02a873c6fe6cb1c21d0ebf78c1bc732ef62cbc92e71d461886c9fa5f04d28dc4c7e3b3ed55fb39603c041d27017322610ac1a16c63c91ed376d9bba0df833d185fff47bad911c26a5918034211a3dbe77663f21a22b4bed8a3cbabfcd5622a1bbc3c015d1890391c5f5f57ff316718f57d7927f41724ee25f274c98a22d8cc1f7348cdd5ff604f4fe21d50f21a1638a75b39c6a5e5c0470812e9e7a663f4f61e6f8b008d31c6e9bd4686a17e0f4fb42c06a19436731d612990f7dbdc2d9b6dd4a5152b8cdbef0906e6f6dd07ad305da2d579fb968b000ad7075c91d35f1af5c3783cbeb9306de0cb3f086a0e2950f564b6e1d0ff9bc785d53ed0176c3feaa5356559ebf4508bccc9202ee45d1c20f768f98f60aed75b7da8dba4f1c36a8b668e3a9a19eb431d4759a7b6840c888774194f60f872790fb243fdb2fb1184bc6dd225bfdb447cc1cfa5277569536d051e8069185956aaa7c34217597ab9c93e3ac647542aab63a11dce2a50d9ae996bb2477afc23d2456f36c58a8ca9308aea7548ea875ed4159d2df58cc3edcc0f1afd5fbed7e8fd540a9e97009a801e6d1397670d528f6c8ebbfce8ac7196efb13d05df6d95942f3a5f7629c857e558f0f408cfe6c5d7b9b3c07ac388904b79ffa7f947c0738b1722e6c817cb87cbee4d26d29ac34205523c121677cf55e891a681e9e4a1847ff29a8f440a427ebb9fa040f212b558c0932ad7f7e1115f48c52adcfbfb13ca9fe08f5507a74b04fee211674865f4ffa3f5cfba2fa7640a055efb6e848f4b6f9222bbe3b26a3721ddabc492c0586ca63fb03cc73007bef0e35606cfc629fa1c551eee50593712449e31c730042128ecdf57b35c79d040c6c23c663c5d30e2f3e711c8a9b9949814afee7117207a2b3ee989dd8edf72d997b3baa3ad5b700a8bf3c29d347094df4864bd4f4c234d5ef682b20f2664f7af13ec91c2490b0ddaff7cb2214d84a0a4486e6c51db48c21b6ef2bccf637bd589204716b019f976491ec9eedea1e67d48521a6e42cbc77c808e597a876226ba352c79e5f485ce3dd499f7eb22831a3951b70c5c869c90596fa211a1b9844c8a80e3fccaef546d08c4599f43b08bf198d8ed3b666088b191103f477bcf885bee9e280c9c126f1a2ddff0963ef5da8136f405dd5479e121fccbfa18c290acbee162a13006fcca07773a3da5db87b29c6ee7d66d2340bc053b83d600b5aaab198965f691aa52be98fda0998bb6a330f54575429a3cb7dcca97db0cdf3a2f1003514b1c213875e5306feb23a152898fd2cd25d4b93867018f713fd5d070846cd9981a489bd1b26ddc9c55a84d2d69d2687c5119cda5dffd0f425205aad0533f1bbef18df707d80422c3ce3f41382bf63906622250d2013552d40d97f2ef8bfca77331262e2989401b7644797bad8525f93754b54ad7098bfccb80540686972f7bc6aae896cd999c7bfdef03d14c013fbe14d2664cedbee82453ce9c0353142b5f8a2914572b1e59c072149b467a52979027666a0659c2e509dd6fd542d2410c42509ceca783d663c5c3813becb351d4a6f1602e40d047fedcbcdffad0c0b37f93bdce20ab98003cb718f613b6900aa252648e54d8b311ab249dfd548f5b60d2d8694f8aa1859b3c5c05f76d3f9b2de17a4a8328c7f5db363d9d161ad3de19b99781ce192ac0082d3b798d84f4bed0dd93ebdca87a6301c68ef57934f00089d3a2b943235633e22d3df2364917738a1cd3a3d3a16c682f087e5df2a7b91eb6fb6902ae15dcf48f5ca55d50015a9013fc9176cba5e37d75bc8d6a7cc72b8ad3fa2da84b31570d100499c7cafd1627c41bc0201f0954e8a8e26e876cd1b090af8d053735298d0d07a86e6d72988ad1f50a9897dc4382a9f6d5c651006e15dddc8951d543d0500adf8112de6767b075655b359407a9492e2076bd357592eda6479e6f37e55ce92024b4f791066f4e815ca5187caaf9870c10b1cdc7484d8f86185690f09c8af0fb222bc8f48e83837525f219cc7f2cef1b66bd392800103fc047dcc2dcfbb33fb4bfd2bd67dacbf66b80b6287f682b4c6b8c0d58cf4f9e3a9f69ea56f9e27e52cd21aab42f9f04eba3317f1927fbdd500e10acc508ff158346839d7e2ec004d9d25d5f785971940a329e89c89ee7575e34060ecdd5333071defcfd84abbf5787a5db4248e312b9f4955d3c767ec218e726fa2f46fbcd75dd6966efdac1ae06013cfcdbb62cb6be19ec96d883676995fb9e325a8c7bf5658806de9c8dd9ce0a7d1bea024c1aca7c1baaf3d5b0a68a8eb75996dc5ca3327dee4794d121d08cae66e2ca9c749c4956deeed5f5a341ae324a98185918c63d09c262acbc3f3190f224a555e133e2629eb7e21db87e075a92d4b3d02c0938c9d155c4816842a6b916b0c57f2c80ca53ecd39194eede230b3c9377b39c8f8d62ab9ca9eb2463e69003c34c9833165ed3063e4541bc5ee55ecb2164784648a1741e505c8609e868b29d52fb4a7ca2bc762ea0a127fdd7f14787faa5188afc8e74557213ec261b86a80227566141885b6a27ef42bc90e9615439ba996c5a47c22812ca7e790ff5b992185cc95438118d34e4e967863a93be631a7e20356b29b8d46fccc0d80feb218d368a8aeae7a7dc7d5005abf36013498fb177e2c8776cc8d1f606ef95217e0be7e18bd75e209427a05895b26354f140e9e1870fc52913d17e09f78e7beb3ce86b3b3f424086b68b5eb7dbb76d45441b7523ac1b7b2c423440886c946b7f9dc1e7baadb434f30a70908a46bb2fc70c5a4ff234d13c3c62065d31931b200426b38fe46cc82cab2d95fcb12ce95ef3910ed0270fe40e65fa6eac628c46abd2aceb604fb64390313ac734f793764e9fd6579591b8b9a87394a2dcb5fee88deadad3b4774cba87c5f2c75a6ab0f2da04a583b1e47da363ca00c7f9a4c7593d139acbefb6f6ec341079d6c713b5fbfd8237e186f2166d6619411092b82b7cf4f45953b33cfccb8fadc4ab5cde926b5a909ec288eb7a9089b8cceb1cef2ef299881bd2a107574325116a7f72d68b641c0ba04024df088606a51c619d7dc1fc924e269f46fb1e73db8b55da8f87e68e66ff52967e66d971acccf2bbf0d6beaa53eb2f1215e23f961dc7370cb05c23606a2c1628509f04448091964cee7ed1eb9c419788f8b6d50f7da0c8ab6d3c206910d345d4e5da8c751145616a9fbf13c9958e253200f4cc65c542486cfd5444aa0f29da078e44f3867f996a04989acc14de81468f7e465737e6394df89fa04793d75c1dd60047fef04717536562e7149c273dfb3587753115e67a18e3de27fa09158bf8e987011b7f227cc1fde527604bf5e5faea8ed9ed60ea18d5b74f4369437adcf590ebade205567c3c4900cef28e91761746d4b031dbe202143712fc31eb9382f9700c6b90b39d6cd382923d44f46401b5325871985cce1822514686d5483725fc89b9c51b43ef05342a3a5c58be8e4220dfdd08e1c46954a9600bf682b21a6734aec38dc4f80d8a8018f2b73bb881e8380e09ec76626524b93695842145408d82817a7fc6aa28818246a554ba9c544dcbb110252cccfbc7c0c0127b66711ee999aa55bd104792077698e569e8b019acebb1b22c0938898a09fa9eef45ebdbeadb9681b3279364484f9b2a22cb77980e0fadca6d102bab74ad40168fc0639fb84ccb6c97594f8be0d8c5565a7e95dbc26769393d54bba05d43f6e5889daeebdc4d907c479395e47ecba27d3e3be73e55a0ba18285879db493386b3c1c1cc9336f9c93b52539595e2da1ddbda556f0f2e5ed9270347d4d41733aaa648394286abf34c347eef0e760f38c51961f3ca4c8089afc6a680aaf1b3b09108dcc7b35f2d14a9bb47a97b7d263fb65f3af91c3a2649d5a62ad0fa19780a02ff8e1b57b422285cdd02727d07819646b45780c383672cd97c88f392357e6c11de8bd3119ba6e44a17e996c999ee73c1a6d125ca6c3dfbbf8c85432e0ed91426e508da52ec3fc54c50c67099ca1fc6f87960cae23d7373c44d66b295343cf3acd75a9bdc5adde2f57846e221611cdf4cff2a5965f1b4fa5dc0390d1e81c44dd619aaf48dbfb5c9f5be2cc3d4551a61ec91a1ad7c30226bbbd6d38f79df22676b42b4c213334c3ba10207289f812ebea67dc86de90a8e7c814e6c683a1fbed6a835c5d36afaf817d5da42726a41a60528c206943f288186821621dfc9274bc6780882b56e974221654db8bbd7172dfcb15ffb6b59297663f959fd238b7d915d42b281168caf23a6463136de6e66fcfa9c4034828f69796480ce756f309539e2ecdd89afb7e98fe0d69e97dce2a769a8966e274a6163bc86b14309adf01e435e8fc829833021a0dccf3d518d50b89ee206ee20c16c4b143dcf28c728e5ce73566c7caaa61b6fc004ee440410db26c683990181f6f02a168ef31aa513edf931dcf1b865ab684f9b6f400ae070af25f85d2340025b0e2aab778c21c7555d5e5f14f0cbd79d89571bc8ed6f0e66f3c22ebd919e0e2c5a1142f9f61e1222c4142e7ec5264e3bfda14759d92897bbe41af8742d02b46bbf2d526141133efe22c795acfaa16fb5700b661202d9a9b7b447e2fe33a64469e3b447fc399da62297205ab4a07311c7fe90234faf4bbd92c97e57af391d17f015bafdfccd59791bb2859a9790e47987093b6cb5a8ffbd83e54fcdfefc5ec153ec38732fb78d2f32ce9657faa17335da999e88564208fc752b264e09adbab145cd667b7672ea0e5b96c8b291d1950978859e73611ad19b34306754ca0ab3fd6e39728c99717747a6465982d85224e4a382a70e50a6dcb16ebddc7cf373c2ee2017964b4aebc55e1e8f783a2f423c1a65473defe7c84292512f7d25578e5196c9cafccae006542193ab20b5db94fc39ea77280438723d003383d0e37b6dff7fa43db29ba52a1235b63db868de9dc807321b74f7581f7de703433d29723eac4eebf5a26711f8e6592396d6bf5e30e87857a"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0xe0, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0"}], 0x1128}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 757.764057ms ago: executing program 4 (id=439): brk(0x7fffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 0s ago: executing program 3 (id=440): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xc7e, 0x5, {r0}, {}, 0x7a, 0x3}) setresuid(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000002000000000000010000000000000000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 98.020096][ T811] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 106.628580][ T5784] cgroup: Unknown subsys name 'net' [ 106.869101][ T5784] cgroup: Unknown subsys name 'cpuset' [ 106.923354][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 109.132524][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.685540][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.688406][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.694633][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.695614][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.699519][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.700471][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.701006][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.747832][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.771086][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.776537][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.837046][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.854101][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.860488][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.881923][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.885218][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.888289][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.895520][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.906090][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.910273][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.913214][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.990594][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.003140][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.005483][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.009294][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.010539][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.035922][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 113.057485][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 113.116254][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 113.215158][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 113.259647][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 113.574348][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.575564][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.575747][ T5804] bridge_slave_0: entered allmulticast mode [ 113.577743][ T5804] bridge_slave_0: entered promiscuous mode [ 113.624278][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.624366][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.624516][ T5816] bridge_slave_0: entered allmulticast mode [ 113.626421][ T5816] bridge_slave_0: entered promiscuous mode [ 113.693880][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.693986][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.694170][ T5804] bridge_slave_1: entered allmulticast mode [ 113.696040][ T5804] bridge_slave_1: entered promiscuous mode [ 113.722326][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.724765][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.726523][ T5816] bridge_slave_1: entered allmulticast mode [ 113.734850][ T5816] bridge_slave_1: entered promiscuous mode [ 113.776717][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.776844][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.776980][ T5803] bridge_slave_0: entered allmulticast mode [ 113.778874][ T5803] bridge_slave_0: entered promiscuous mode [ 113.854538][ T60] Bluetooth: hci0: command tx timeout [ 113.854542][ T5811] Bluetooth: hci1: command tx timeout [ 113.881432][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.881588][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.881773][ T5803] bridge_slave_1: entered allmulticast mode [ 113.890495][ T5803] bridge_slave_1: entered promiscuous mode [ 113.977403][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.977528][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.977670][ T5810] bridge_slave_0: entered allmulticast mode [ 113.980368][ T5810] bridge_slave_0: entered promiscuous mode [ 114.013981][ T60] Bluetooth: hci2: command tx timeout [ 114.014502][ T5811] Bluetooth: hci3: command tx timeout [ 114.017652][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.034110][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.034581][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.035179][ T5808] bridge_slave_0: entered allmulticast mode [ 114.052290][ T5808] bridge_slave_0: entered promiscuous mode [ 114.092203][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.097347][ T5811] Bluetooth: hci4: command tx timeout [ 114.130042][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.130167][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.130337][ T5810] bridge_slave_1: entered allmulticast mode [ 114.132409][ T5810] bridge_slave_1: entered promiscuous mode [ 114.170295][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.170572][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.170746][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.170887][ T5808] bridge_slave_1: entered allmulticast mode [ 114.217975][ T5808] bridge_slave_1: entered promiscuous mode [ 114.222189][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.233293][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.339107][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.429639][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.432226][ T5804] team0: Port device team_slave_0 added [ 114.447562][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.459968][ T5816] team0: Port device team_slave_0 added [ 114.485005][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.487736][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.489986][ T5804] team0: Port device team_slave_1 added [ 114.492108][ T5816] team0: Port device team_slave_1 added [ 114.530991][ T5803] team0: Port device team_slave_0 added [ 114.605707][ T5803] team0: Port device team_slave_1 added [ 114.688484][ T5810] team0: Port device team_slave_0 added [ 114.690801][ T5808] team0: Port device team_slave_0 added [ 114.692132][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.692144][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.692163][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.765200][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.765218][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.765246][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.837166][ T5810] team0: Port device team_slave_1 added [ 114.839644][ T5808] team0: Port device team_slave_1 added [ 114.840422][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.840433][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.840453][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.842204][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.842215][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.842234][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.949017][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.949030][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.949050][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.041296][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.041311][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.041332][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.568040][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.568059][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.568086][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.570025][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.570037][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.570056][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.635941][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.635979][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.636040][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.648961][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.649015][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.649087][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.859038][ T5816] hsr_slave_0: entered promiscuous mode [ 115.860314][ T5816] hsr_slave_1: entered promiscuous mode [ 115.880940][ T5804] hsr_slave_0: entered promiscuous mode [ 115.881921][ T5804] hsr_slave_1: entered promiscuous mode [ 115.885559][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 115.885840][ T5804] Cannot create hsr debugfs directory [ 115.933088][ T60] Bluetooth: hci0: command tx timeout [ 115.933183][ T5811] Bluetooth: hci1: command tx timeout [ 115.937199][ T5803] hsr_slave_0: entered promiscuous mode [ 115.939226][ T5803] hsr_slave_1: entered promiscuous mode [ 115.939949][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 115.939967][ T5803] Cannot create hsr debugfs directory [ 116.088900][ T5810] hsr_slave_0: entered promiscuous mode [ 116.091190][ T5810] hsr_slave_1: entered promiscuous mode [ 116.092845][ T60] Bluetooth: hci2: command tx timeout [ 116.092941][ T5811] Bluetooth: hci3: command tx timeout [ 116.094301][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 116.094402][ T5810] Cannot create hsr debugfs directory [ 116.130791][ T5808] hsr_slave_0: entered promiscuous mode [ 116.131852][ T5808] hsr_slave_1: entered promiscuous mode [ 116.132585][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 116.134684][ T5808] Cannot create hsr debugfs directory [ 116.172927][ T5811] Bluetooth: hci4: command tx timeout [ 117.191338][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.224500][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.263000][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.312988][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.463583][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.526094][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.583649][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.636024][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.777498][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.826198][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.871042][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.922348][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.013035][ T60] Bluetooth: hci0: command tx timeout [ 118.013969][ T5811] Bluetooth: hci1: command tx timeout [ 118.164928][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.185726][ T5811] Bluetooth: hci3: command tx timeout [ 118.185758][ T5811] Bluetooth: hci2: command tx timeout [ 118.233253][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.252864][ T60] Bluetooth: hci4: command tx timeout [ 118.297053][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.394520][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.648696][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.697489][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.699313][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.756348][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.796643][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.933252][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.955024][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.016247][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.017431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.081737][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.081858][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.129676][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.170877][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.201500][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.201688][ T4472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.257911][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.258097][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.347510][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.411431][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.411590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.477986][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.502094][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.502246][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.670149][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.786926][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.805913][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.806298][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.898712][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.912943][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.021885][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.093685][ T60] Bluetooth: hci1: command tx timeout [ 120.093721][ T60] Bluetooth: hci0: command tx timeout [ 120.149101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.149404][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.238106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.238248][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.252761][ T5811] Bluetooth: hci2: command tx timeout [ 120.252799][ T5811] Bluetooth: hci3: command tx timeout [ 120.332733][ T60] Bluetooth: hci4: command tx timeout [ 120.377891][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.782153][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.895427][ T5816] veth0_vlan: entered promiscuous mode [ 120.980629][ T5816] veth1_vlan: entered promiscuous mode [ 121.054962][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.209915][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.316681][ T5816] veth0_macvtap: entered promiscuous mode [ 121.365756][ T5816] veth1_macvtap: entered promiscuous mode [ 121.442276][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.475168][ T5803] veth0_vlan: entered promiscuous mode [ 121.522504][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.584199][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.618123][ T5803] veth1_vlan: entered promiscuous mode [ 121.645224][ T5810] veth0_vlan: entered promiscuous mode [ 121.668704][ T766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.687151][ T766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.707202][ T766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.729705][ T766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.751808][ T5810] veth1_vlan: entered promiscuous mode [ 121.991282][ T5808] veth0_vlan: entered promiscuous mode [ 122.009002][ T5803] veth0_macvtap: entered promiscuous mode [ 122.111378][ T5803] veth1_macvtap: entered promiscuous mode [ 122.134000][ T5804] veth0_vlan: entered promiscuous mode [ 122.140502][ T5808] veth1_vlan: entered promiscuous mode [ 122.170411][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.170430][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.210125][ T5810] veth0_macvtap: entered promiscuous mode [ 122.272894][ T5810] veth1_macvtap: entered promiscuous mode [ 122.291368][ T5804] veth1_vlan: entered promiscuous mode [ 122.309175][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.309198][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.310692][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.379575][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.409480][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.442069][ T4472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.457324][ T5808] veth0_macvtap: entered promiscuous mode [ 122.459005][ T4472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.482000][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.506168][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.537584][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.541392][ T5808] veth1_macvtap: entered promiscuous mode [ 122.574062][ T4472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.578387][ T4472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.645707][ T4472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.651739][ T4472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.729187][ T5804] veth0_macvtap: entered promiscuous mode [ 122.886818][ T5804] veth1_macvtap: entered promiscuous mode [ 122.922406][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.023360][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.069780][ T4472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.069805][ T4472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.127283][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.145403][ T167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.202103][ T766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.224605][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.243942][ T766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.248621][ T766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.330697][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.363422][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 123.386137][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.386158][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.422507][ T5877] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.422531][ T5877] usb 4-1: config 0 has no interface number 0 [ 123.440622][ T5877] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.440722][ T5877] usb 4-1: config 0 interface 89 has no altsetting 0 [ 123.516254][ T5877] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.516287][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.516308][ T5877] usb 4-1: Product: syz [ 123.516324][ T5877] usb 4-1: Manufacturer: syz [ 123.516340][ T5877] usb 4-1: SerialNumber: syz [ 123.516649][ T1431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.594348][ T1431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.619078][ T1431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.637849][ T5877] usb 4-1: config 0 descriptor?? [ 123.748508][ T3551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.750646][ T5877] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 123.750690][ T5877] em28xx 4-1:0.89: Video interface 89 found: [ 123.814802][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.814823][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.997442][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.314121][ T5877] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 124.344376][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.344399][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.497510][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.497535][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.621571][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.621601][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.759394][ T5919] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 124.826712][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.826735][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.910363][ T5877] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 124.910398][ T5877] em28xx 4-1:0.89: board has no eeprom [ 124.984478][ T5877] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 124.984517][ T5877] em28xx 4-1:0.89: analog set to bulk mode. [ 124.994984][ T9] em28xx 4-1:0.89: Registering V4L2 extension [ 125.146887][ T9] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 125.154397][ T9] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 125.154876][ T9] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 125.155851][ T9] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 125.178703][ T9] em28xx 4-1:0.89: Config register raw data: 0xfffffffb [ 125.209680][ T9] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 125.209742][ T9] em28xx 4-1:0.89: No AC97 audio processor [ 125.245367][ T5877] usb 4-1: USB disconnect, device number 2 [ 125.266394][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.266420][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.318684][ T5877] em28xx 4-1:0.89: Disconnecting em28xx [ 125.794615][ T9] usb 4-1: Decoder not found [ 125.794638][ T9] em28xx 4-1:0.89: failed to create media graph [ 125.794683][ T9] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 125.848301][ T9] em28xx 4-1:0.89: Registering snapshot button... [ 126.025886][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5 [ 126.121895][ T9] em28xx 4-1:0.89: Remote control support is not available for this card. [ 126.155733][ T5877] em28xx 4-1:0.89: Closing input extension [ 126.156409][ T5877] em28xx 4-1:0.89: Deregistering snapshot button [ 126.243389][ T37] audit: type=1326 audit(1772570080.416:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.243442][ T37] audit: type=1326 audit(1772570080.416:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.244548][ T37] audit: type=1326 audit(1772570080.416:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.244610][ T37] audit: type=1326 audit(1772570080.416:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.244677][ T37] audit: type=1326 audit(1772570080.416:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.246621][ T37] audit: type=1326 audit(1772570080.416:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.246672][ T37] audit: type=1326 audit(1772570080.416:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.246715][ T37] audit: type=1326 audit(1772570080.416:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.246760][ T37] audit: type=1326 audit(1772570080.416:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.246805][ T37] audit: type=1326 audit(1772570080.416:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5928 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4216c799 code=0x7ffc0000 [ 126.261086][ T5931] binder: 5928:5931 ioctl c0306201 200000000540 returned -14 [ 127.152645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.393103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.417844][ T5940] Zero length message leads to an empty skb [ 127.480784][ T5877] em28xx 4-1:0.89: Freeing device [ 127.972661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.243611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.251535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.252665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.265727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.272676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.282668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.292673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.554004][ T811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.764206][ T811] usb 2-1: Using ep0 maxpacket: 16 [ 131.797946][ T811] usb 2-1: config 0 has no interfaces? [ 131.833661][ T811] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.833695][ T811] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.833717][ T811] usb 2-1: Manufacturer: syz [ 131.924944][ T811] usb 2-1: config 0 descriptor?? [ 134.042408][ T5957] binder: 5954:5957 ioctl c0306201 200000000540 returned -14 [ 134.629859][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 134.629883][ T37] audit: type=1326 audit(1772570088.086:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.629935][ T37] audit: type=1326 audit(1772570088.096:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.629977][ T37] audit: type=1326 audit(1772570088.106:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.630019][ T37] audit: type=1326 audit(1772570088.126:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.630061][ T37] audit: type=1326 audit(1772570088.126:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.630100][ T37] audit: type=1326 audit(1772570088.146:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.630142][ T37] audit: type=1326 audit(1772570088.156:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.630194][ T37] audit: type=1326 audit(1772570088.156:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.630237][ T37] audit: type=1326 audit(1772570088.166:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 134.630278][ T37] audit: type=1326 audit(1772570088.166:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8289c799 code=0x7ffc0000 [ 135.066701][ T5877] usb 2-1: USB disconnect, device number 2 [ 137.262946][ T896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.412738][ T896] usb 1-1: Using ep0 maxpacket: 32 [ 137.415558][ T896] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 137.415594][ T896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.460162][ T896] usb 1-1: config 0 descriptor?? [ 137.480919][ T896] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 138.098912][ T896] gspca_vc032x: reg_r err -110 [ 138.098955][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.098970][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.098979][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.098987][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.098995][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099003][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099011][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099019][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099026][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099034][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099049][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099056][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099064][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099071][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099079][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099087][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099095][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099102][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.099110][ T896] gspca_vc032x: Unknown sensor... [ 138.099200][ T896] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 139.205366][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.206353][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.681369][ T5914] usb 1-1: USB disconnect, device number 2 [ 143.112754][ T5814] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.659904][ T5814] usb 5-1: device descriptor read/all, error -71 [ 145.972812][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.124656][ T5814] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.126111][ T5814] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 146.126133][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.126148][ T5814] usb 5-1: SerialNumber: syz [ 147.645230][ T5814] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 147.715567][ T5814] usb-storage 5-1:1.0: USB Mass Storage device detected [ 147.780333][ T5814] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 147.924557][ T5814] usb 5-1: USB disconnect, device number 3 [ 151.384072][ T6038] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 152.002764][ T896] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.196151][ T896] usb 1-1: Using ep0 maxpacket: 16 [ 152.225077][ T896] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 152.225110][ T896] usb 1-1: config 1 has no interface number 0 [ 152.225159][ T896] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 152.225187][ T896] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.225214][ T896] usb 1-1: config 1 interface 105 has no altsetting 0 [ 152.327761][ T896] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 152.327795][ T896] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 152.327817][ T896] usb 1-1: Product: syz [ 152.327832][ T896] usb 1-1: Manufacturer: syz [ 152.327849][ T896] usb 1-1: SerialNumber: syz [ 152.423941][ T6043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.424587][ T6043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.899983][ T6043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.900462][ T6043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.167406][ T896] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 5 [ 153.168742][ T896] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 155.270546][ T32] usb 1-1: USB disconnect, device number 3 [ 158.484016][ T6081] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.45'. [ 159.482719][ T6083] netlink: 64 bytes leftover after parsing attributes in process `syz.4.47'. [ 168.971633][ T6138] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.58'. [ 170.492491][ T6159] netlink: 64 bytes leftover after parsing attributes in process `syz.2.65'. [ 179.091817][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 179.091836][ T37] audit: type=1326 audit(1772570132.716:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.091887][ T37] audit: type=1326 audit(1772570132.726:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.091928][ T37] audit: type=1326 audit(1772570132.806:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.091970][ T37] audit: type=1326 audit(1772570132.826:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.092015][ T37] audit: type=1326 audit(1772570132.836:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.092108][ T37] audit: type=1326 audit(1772570132.896:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.092148][ T37] audit: type=1326 audit(1772570132.896:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.092187][ T37] audit: type=1326 audit(1772570132.916:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.092225][ T37] audit: type=1326 audit(1772570133.136:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.092263][ T37] audit: type=1326 audit(1772570133.146:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6235 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a5472c799 code=0x7ffc0000 [ 179.094896][ T6239] binder: 6235:6239 ioctl c0306201 200000000540 returned -14 [ 183.209729][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.209767][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.377484][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.377515][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.587525][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 184.587648][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.587677][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.587693][ T60] Workqueue: hci0 hci_rx_work [ 184.587759][ T60] Call Trace: [ 184.587775][ T60] [ 184.587788][ T60] dump_stack_lvl+0xe8/0x150 [ 184.587828][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 184.587857][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 184.587890][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 184.587915][ T60] ? __rcu_read_unlock+0x83/0xe0 [ 184.587951][ T60] ? rt_spin_unlock+0x160/0x200 [ 184.587981][ T60] kobject_add_internal+0x631/0xd10 [ 184.588028][ T60] kobject_add+0x163/0x240 [ 184.588067][ T60] ? __pfx_kobject_add+0x10/0x10 [ 184.588109][ T60] ? get_device_parent+0x370/0x3a0 [ 184.588149][ T60] device_add+0x408/0xb80 [ 184.588188][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 184.588219][ T60] le_conn_complete_evt+0xf1d/0x1430 [ 184.588268][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 184.588306][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 184.588339][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.588374][ T60] ? skb_pull_data+0xfb/0x200 [ 184.588414][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 184.588457][ T60] hci_event_packet+0x7af/0x12c0 [ 184.588494][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 184.588528][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 184.588556][ T60] ? rt_spin_unlock+0x14f/0x200 [ 184.588591][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 184.588618][ T60] hci_rx_work+0x3ee/0x1030 [ 184.588650][ T60] ? preempt_schedule_thunk+0x16/0x30 [ 184.588680][ T60] ? process_scheduled_works+0xa25/0x1830 [ 184.588720][ T60] process_scheduled_works+0xb02/0x1830 [ 184.588785][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.588826][ T60] ? assign_work+0x3d5/0x5e0 [ 184.588864][ T60] worker_thread+0xa50/0xfc0 [ 184.588927][ T60] kthread+0x388/0x470 [ 184.588951][ T60] ? __pfx_worker_thread+0x10/0x10 [ 184.588982][ T60] ? __pfx_kthread+0x10/0x10 [ 184.589007][ T60] ret_from_fork+0x51e/0xb90 [ 184.589044][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 184.589075][ T60] ? __switch_to+0xc7d/0x1450 [ 184.589108][ T60] ? __pfx_kthread+0x10/0x10 [ 184.589134][ T60] ret_from_fork_asm+0x1a/0x30 [ 184.589175][ T60] [ 184.589560][ T60] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 184.589872][ T60] Bluetooth: hci0: failed to register connection device [ 190.159960][ T6306] trusted_key: syz.4.99 sent an empty control message without MSG_MORE. [ 191.316172][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 195.889769][ T6349] netlink: 64 bytes leftover after parsing attributes in process `syz.0.115'. [ 196.023478][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.023510][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.109119][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.109153][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.090243][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.090331][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.048290][ T6407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.132'. [ 215.796968][ T6514] binder: 6506:6514 ioctl c0306201 200000000540 returned -14 [ 217.282060][ T5814] IPVS: starting estimator thread 0... [ 217.419651][ T6525] IPVS: using max 7 ests per chain, 16800 per kthread [ 220.754968][ T6546] syz.3.171 uses obsolete (PF_INET,SOCK_PACKET) [ 221.287875][ T6560] binder: 6548:6560 ioctl c0306201 200000000540 returned -14 [ 222.000531][ T5944] IPVS: starting estimator thread 0... [ 222.348389][ T6563] IPVS: using max 7 ests per chain, 16800 per kthread [ 222.904125][ T5777] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.517953][ T5777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.518014][ T5777] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.518040][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.522434][ T5777] usb 5-1: config 0 descriptor?? [ 223.576558][ T5777] pwc: Askey VC010 type 2 USB webcam detected. [ 223.967493][ T5777] pwc: recv_control_msg error -32 req 02 val 2b00 [ 223.972231][ T5777] pwc: recv_control_msg error -32 req 02 val 2700 [ 223.977165][ T5777] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.978160][ T5777] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.980289][ T5777] pwc: recv_control_msg error -32 req 04 val 1300 [ 224.012726][ T5777] pwc: recv_control_msg error -32 req 04 val 1400 [ 224.016867][ T5777] pwc: recv_control_msg error -71 req 02 val 2000 [ 224.018313][ T5777] pwc: recv_control_msg error -71 req 02 val 2100 [ 224.020733][ T5777] pwc: recv_control_msg error -71 req 04 val 1500 [ 224.023415][ T5777] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.025881][ T5777] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.030570][ T5777] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.045599][ T5777] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.047631][ T5777] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.052917][ T5777] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.057022][ T5777] pwc: recv_control_msg error -71 req 04 val 1200 [ 225.650724][ T5777] pwc: Registered as video103. [ 225.666210][ T5777] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 225.770668][ T5777] usb 5-1: USB disconnect, device number 4 [ 229.187288][ T6615] binder: 6612:6615 ioctl c0306201 200000000540 returned -14 [ 229.996602][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 229.996625][ T37] audit: type=1326 audit(1772570183.286:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.996675][ T37] audit: type=1326 audit(1772570183.286:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.996722][ T37] audit: type=1326 audit(1772570183.296:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.996769][ T37] audit: type=1326 audit(1772570183.296:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.996817][ T37] audit: type=1326 audit(1772570183.296:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.996863][ T37] audit: type=1326 audit(1772570183.306:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.996909][ T37] audit: type=1326 audit(1772570183.306:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.996955][ T37] audit: type=1326 audit(1772570183.306:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.997002][ T37] audit: type=1326 audit(1772570183.306:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 229.997050][ T37] audit: type=1326 audit(1772570183.316:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85e76c799 code=0x7ffc0000 [ 230.741209][ T811] IPVS: starting estimator thread 0... [ 230.878907][ T6626] IPVS: using max 7 ests per chain, 16800 per kthread [ 240.066989][ T6696] Bluetooth: hci3: command 0x0406 tx timeout [ 240.069145][ T6696] Bluetooth: hci0: command 0x0406 tx timeout [ 240.069184][ T6696] Bluetooth: hci1: command 0x0406 tx timeout [ 240.069267][ T6696] Bluetooth: hci2: command 0x0406 tx timeout [ 240.069296][ T6696] Bluetooth: hci4: command 0x0406 tx timeout [ 246.752740][ T5814] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 246.928663][ T5814] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 246.928702][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.928725][ T5814] usb 4-1: Product: syz [ 246.928742][ T5814] usb 4-1: Manufacturer: syz [ 246.928757][ T5814] usb 4-1: SerialNumber: syz [ 246.940345][ T5814] usb 4-1: config 0 descriptor?? [ 247.247576][ T5814] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.269443][ T6754] team0 (unregistering): Port device team_slave_0 removed [ 248.317579][ T6754] team0 (unregistering): Port device team_slave_1 removed [ 250.856291][ T5814] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 250.860030][ T5814] usb 4-1: USB disconnect, device number 3 [ 258.872865][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 259.643765][ T5887] usb 2-1: device descriptor read/64, error -71 [ 259.892683][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 260.043294][ T6867] kvm: kvm [6866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880 [ 260.043404][ T6867] kvm: kvm [6866]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 260.046993][ T6867] kvm: kvm [6866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa088 [ 260.047531][ T6867] kvm: kvm [6866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd1a8 [ 260.047591][ T6867] kvm: kvm [6866]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 260.123391][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.123460][ T5887] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 260.123485][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.131461][ T5887] usb 2-1: config 0 descriptor?? [ 260.187640][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 261.382732][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 261.391847][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 261.395149][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 261.424761][ T5887] pwc: recv_control_msg error -32 req 04 val 1000 [ 261.425441][ T5887] pwc: recv_control_msg error -32 req 04 val 1300 [ 261.426165][ T5887] pwc: recv_control_msg error -32 req 04 val 1400 [ 261.427091][ T5887] pwc: recv_control_msg error -32 req 02 val 2000 [ 261.630815][ T5887] pwc: recv_control_msg error -71 req 04 val 1500 [ 261.631271][ T5887] pwc: recv_control_msg error -71 req 02 val 2500 [ 261.631678][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 261.632078][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 261.662384][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 261.673100][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 261.673810][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 261.695734][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 261.703107][ T5887] pwc: Registered as video103. [ 261.711684][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 261.892663][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.892736][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.961833][ T5887] usb 2-1: USB disconnect, device number 4 [ 265.367254][ T6923] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 270.164507][ T811] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 271.672845][ T5777] IPVS: starting estimator thread 0... [ 271.769353][ T6962] IPVS: using max 8 ests per chain, 19200 per kthread [ 286.631989][ T7034] overlayfs: missing 'lowerdir' [ 287.764286][ T7040] netlink: 96 bytes leftover after parsing attributes in process `syz.4.319'. [ 294.107280][ T7077] netlink: 92 bytes leftover after parsing attributes in process `syz.3.332'. [ 298.960280][ T7114] netlink: 92 bytes leftover after parsing attributes in process `syz.2.344'. [ 301.607120][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 302.500787][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 302.607198][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 302.651411][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.651447][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.651474][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.651500][ T5814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.654532][ T5814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.654664][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.715223][ T5814] usb 3-1: GET_CAPABILITIES returned 0 [ 303.715273][ T5814] usbtmc 3-1:16.0: can't read capabilities [ 303.824396][ T7137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.007382][ T5814] usb 3-1: USB disconnect, device number 2 [ 305.870926][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.906392][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.937623][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.941426][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.955016][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.012857][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 307.195114][ T7146] orangefs_mount: mount request failed with -4 [ 307.796205][ T7155] netlink: 92 bytes leftover after parsing attributes in process `syz.2.356'. [ 308.982387][ T5914] IPVS: starting estimator thread 0... [ 310.095949][ T7167] IPVS: using max 11 ests per chain, 26400 per kthread [ 310.687778][ T5812] Bluetooth: hci6: command tx timeout [ 312.817628][ T5812] Bluetooth: hci6: command tx timeout [ 316.528804][ T7175] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 316.600032][ T5812] Bluetooth: hci6: command tx timeout [ 319.769017][ T5812] Bluetooth: hci6: command tx timeout [ 320.005548][ T7188] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 323.483180][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.483357][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.649229][ T157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.283990][ T7216] netlink: 84 bytes leftover after parsing attributes in process `syz.1.369'. [ 329.995748][ T7228] ======================================================= [ 329.995748][ T7228] WARNING: The mand mount option has been deprecated and [ 329.995748][ T7228] and is ignored by this kernel. Remove the mand [ 329.995748][ T7228] option from the mount to silence this warning. [ 329.995748][ T7228] ======================================================= [ 331.061736][ T7143] chnl_net:caif_netlink_parms(): no params data found [ 335.917841][ T157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.988730][ T7262] binder: 7261:7262 ioctl 4018620d 0 returned -22 [ 336.324791][ T157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.550993][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.564573][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.564868][ T7143] bridge_slave_0: entered allmulticast mode [ 336.568989][ T7143] bridge_slave_0: entered promiscuous mode [ 336.602343][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.615335][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.615795][ T7143] bridge_slave_1: entered allmulticast mode [ 336.619380][ T7143] bridge_slave_1: entered promiscuous mode [ 336.955136][ T157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.405024][ T7285] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 338.310616][ T7143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.349858][ T7143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.171934][ T5812] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 339.172020][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.172051][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.172071][ T5812] Workqueue: hci3 hci_rx_work [ 339.172116][ T5812] Call Trace: [ 339.172131][ T5812] [ 339.172146][ T5812] dump_stack_lvl+0xe8/0x150 [ 339.172189][ T5812] sysfs_create_dir_ns+0x271/0x2a0 [ 339.172218][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 339.172255][ T5812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 339.172285][ T5812] ? rt_spin_unlock+0x160/0x200 [ 339.172314][ T5812] kobject_add_internal+0x631/0xd10 [ 339.172365][ T5812] kobject_add+0x163/0x240 [ 339.172409][ T5812] ? __pfx_kobject_add+0x10/0x10 [ 339.172449][ T5812] ? device_add+0x303/0xb80 [ 339.172492][ T5812] device_add+0x408/0xb80 [ 339.172529][ T5812] hci_conn_add_sysfs+0xd5/0x210 [ 339.172562][ T5812] le_conn_complete_evt+0xf1d/0x1430 [ 339.172596][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.172636][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 339.172676][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 339.172815][ T5812] ? skb_pull_data+0xfb/0x200 [ 339.172863][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 339.172912][ T5812] hci_event_packet+0x7af/0x12c0 [ 339.172950][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 339.172986][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 339.173015][ T5812] ? preempt_schedule_common+0x82/0xd0 [ 339.173050][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 339.173086][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 339.173119][ T5812] hci_rx_work+0x3ee/0x1030 [ 339.173155][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 339.173186][ T5812] ? process_scheduled_works+0xa25/0x1830 [ 339.173223][ T5812] process_scheduled_works+0xb02/0x1830 [ 339.173295][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.173340][ T5812] ? assign_work+0x3d5/0x5e0 [ 339.173380][ T5812] worker_thread+0xa50/0xfc0 [ 339.173843][ T5812] kthread+0x388/0x470 [ 339.173876][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 339.173912][ T5812] ? __pfx_kthread+0x10/0x10 [ 339.173943][ T5812] ret_from_fork+0x51e/0xb90 [ 339.174174][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 339.174230][ T5812] ? __switch_to+0xc7d/0x1450 [ 339.174271][ T5812] ? __pfx_kthread+0x10/0x10 [ 339.174305][ T5812] ret_from_fork_asm+0x1a/0x30 [ 339.174355][ T5812] [ 339.187184][ T5812] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 339.187557][ T5812] Bluetooth: hci3: failed to register connection device [ 339.449870][ T7143] team0: Port device team_slave_0 added [ 339.743993][ T7143] team0: Port device team_slave_1 added [ 341.109781][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.109800][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.109828][ T7143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.112195][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.112212][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.112241][ T7143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.505802][ T7325] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 344.975247][ T5811] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 345.533175][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 345.970684][ T7143] hsr_slave_0: entered promiscuous mode [ 345.992098][ T7143] hsr_slave_1: entered promiscuous mode [ 345.995094][ T7143] debugfs: 'hsr0' already exists in 'hsr' [ 345.995128][ T7143] Cannot create hsr debugfs directory [ 346.033397][ T157] bridge_slave_1: left allmulticast mode [ 346.033603][ T157] bridge_slave_1: left promiscuous mode [ 350.279139][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.684499][ T157] bridge_slave_0: left allmulticast mode [ 350.684531][ T157] bridge_slave_0: left promiscuous mode [ 350.684854][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.143093][ T7344] netlink: 184 bytes leftover after parsing attributes in process `syz.4.410'. [ 352.763056][ T896] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 352.806121][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.876005][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.893954][ T896] usb 3-1: device descriptor read/64, error -71 [ 352.917587][ T157] bond0 (unregistering): Released all slaves [ 353.423220][ T896] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 353.946861][ T5811] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 354.272693][ T896] usb 3-1: device descriptor read/64, error -71 [ 354.387676][ T5777] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 354.423381][ T896] usb usb3-port1: attempt power cycle [ 355.002724][ T5777] usb 5-1: Using ep0 maxpacket: 8 [ 355.006906][ T5777] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.006978][ T5777] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.006996][ T5777] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.007033][ T5777] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.007101][ T5777] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.007122][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.131308][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 355.162658][ T896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 355.183457][ T896] usb 3-1: device descriptor read/8, error -71 [ 355.334855][ T5777] usb 5-1: GET_CAPABILITIES returned 0 [ 355.334890][ T5777] usbtmc 5-1:16.0: can't read capabilities [ 355.390147][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 355.442758][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 355.447722][ T5877] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.447755][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.447782][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.447808][ T5877] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.447853][ T5877] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.447878][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.462757][ T896] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 355.532756][ T896] usb 3-1: device descriptor read/8, error -71 [ 355.554523][ T7366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.640636][ T5777] usb 5-1: USB disconnect, device number 5 [ 355.653257][ T896] usb usb3-port1: unable to enumerate USB device [ 355.936287][ T5877] usb 2-1: GET_CAPABILITIES returned 0 [ 355.936342][ T5877] usbtmc 2-1:16.0: can't read capabilities [ 356.160325][ T5887] usb 2-1: USB disconnect, device number 5 [ 357.472979][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 357.642743][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 357.645830][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 357.645862][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 357.645888][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 357.645914][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.645960][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 357.645990][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.173900][ T5887] usb 2-1: GET_CAPABILITIES returned 0 [ 358.173951][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 359.044515][ T157] hsr_slave_0: left promiscuous mode [ 359.065099][ T5812] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 359.065122][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 359.065141][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.065153][ T5812] Workqueue: hci1 hci_rx_work [ 359.065181][ T5812] Call Trace: [ 359.065193][ T5812] [ 359.065201][ T5812] dump_stack_lvl+0xe8/0x150 [ 359.065229][ T5812] sysfs_create_dir_ns+0x271/0x2a0 [ 359.065247][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 359.065267][ T5812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 359.065288][ T5812] ? rt_spin_unlock+0x160/0x200 [ 359.065307][ T5812] kobject_add_internal+0x631/0xd10 [ 359.065339][ T5812] kobject_add+0x163/0x240 [ 359.065368][ T5812] ? __pfx_kobject_add+0x10/0x10 [ 359.065397][ T5812] ? get_device_parent+0x370/0x3a0 [ 359.065425][ T5812] device_add+0x408/0xb80 [ 359.065452][ T5812] hci_conn_add_sysfs+0xd5/0x210 [ 359.065474][ T5812] le_conn_complete_evt+0xf1d/0x1430 [ 359.065507][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 359.065533][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 359.065555][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 359.065578][ T5812] ? skb_pull_data+0xfb/0x200 [ 359.065607][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 359.065637][ T5812] hci_event_packet+0x7af/0x12c0 [ 359.065662][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 359.065713][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 359.065733][ T5812] ? preempt_schedule_common+0x82/0xd0 [ 359.065755][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 359.065778][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 359.065797][ T5812] hci_rx_work+0x3ee/0x1030 [ 359.065819][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 359.065840][ T5812] ? process_scheduled_works+0xa25/0x1830 [ 359.065865][ T5812] process_scheduled_works+0xb02/0x1830 [ 359.065917][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.065945][ T5812] ? assign_work+0x3d5/0x5e0 [ 359.065971][ T5812] worker_thread+0xa50/0xfc0 [ 359.066014][ T5812] kthread+0x388/0x470 [ 359.066031][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 359.066052][ T5812] ? __pfx_kthread+0x10/0x10 [ 359.066070][ T5812] ret_from_fork+0x51e/0xb90 [ 359.066096][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 359.066118][ T5812] ? __switch_to+0xc7d/0x1450 [ 359.066140][ T5812] ? __pfx_kthread+0x10/0x10 [ 359.066158][ T5812] ret_from_fork_asm+0x1a/0x30 [ 359.066187][ T5812] [ 359.066210][ T5812] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 359.066241][ T5812] Bluetooth: hci1: failed to register connection device [ 359.336575][ T5887] usb 2-1: USB disconnect, device number 6 [ 359.426990][ T157] hsr_slave_1: left promiscuous mode [ 359.494537][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.494783][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.763261][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.763293][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.611551][ T157] veth1_macvtap: left promiscuous mode [ 364.611774][ T157] veth0_macvtap: left promiscuous mode [ 364.611986][ T157] veth1_vlan: left promiscuous mode [ 364.612195][ T157] veth0_vlan: left promiscuous mode [ 365.084077][ T7427] netlink: 64 bytes leftover after parsing attributes in process `syz.3.432'. [ 367.315991][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.390256][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.401837][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.434733][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.447618][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.007156][ T157] team0 (unregistering): Port device team_slave_1 removed [ 369.113784][ T157] team0 (unregistering): Port device team_slave_0 removed [ 369.535196][ T5812] Bluetooth: hci2: command tx timeout [ 369.836309][ T5812] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 369.836371][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.836400][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.836416][ T5812] Workqueue: hci4 hci_rx_work [ 369.836452][ T5812] Call Trace: [ 369.836462][ T5812] [ 369.836474][ T5812] dump_stack_lvl+0xe8/0x150 [ 369.836513][ T5812] sysfs_create_dir_ns+0x271/0x2a0 [ 369.836921][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 369.836956][ T5812] ? __pfx_sysfs_create_dir[ 369.836956][ T5812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 369.836993][ T5812] ? rt_spin_unlock+0x160/0x200 [ 369.837024][ T5812] kobject_add_internal+0x631/0xd10 [ 369.837077][ T5812] kobject_add+0x163/0x240 [ 369.837109][ T5812] ? irqentry_exit+0x59e/0x620 [ 369.837147][ T5812] ? __pfx_kobject_add+0x10/0x10 [ 369.837199][ T5812] device_add+0x408/0xb80 [ 369.837240][ T5812] hci_conn_add_sysfs+0xd5/0x210 [ 369.837272][ T5812] le_conn_complete_evt+0xf1d/0x1430 [ 369.837307][ T5812] ? irqentry_exit+0x59e/0x620 [ 369.837355][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 369.837400][ T5812] ? skb_pull_data+0xfb/0x200 [ 369.837443][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 369.837487][ T5812] hci_event_packet+0x7af/0x12c0 [ 369.837523][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 369.837557][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 369.837585][ T5812] ? preempt_schedule_common+0x82/0xd0 [ 369.837616][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 369.837654][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 369.837682][ T5812] hci_rx_work+0x3ee/0x1030 [ 369.837714][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 369.837746][ T5812] ? process_scheduled_works+0xa25/0x1830 [ 369.837782][ T5812] process_scheduled_works+0xb02/0x1830 [ 369.837847][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.837887][ T5812] ? assign_work+0x3d5/0x5e0 [ 369.837925][ T5812] worker_thread+0xa50/0xfc0 [ 369.837989][ T5812] kthread+0x388/0x470 [ 369.838015][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 369.838045][ T5812] ? __pfx_kthread+0x10/0x10 [ 369.838071][ T5812] ret_from_fork+0x51e/0xb90 [ 369.838107][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 369.838138][ T5812] ? __switch_to+0xc7d/0x1450 [ 369.838170][ T5812] ? __pfx_kthread+0x10/0x10 [ 369.838197][ T5812] ret_from_fork_asm+0x1a/0x30 [ 369.838240][ T5812] [ 369.839840][ T5812] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 369.840187][ T5812] Bluetooth: hci4: failed to register connection device [ 370.016247][ T5812] ================================================================== [ 370.016272][ T5812] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.016313][ T5812] Read of size 8 at addr ffff88803be107b0 by task kworker/u9:4/5812 [ 370.016333][ T5812] [ 370.016348][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.016386][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.016404][ T5812] Workqueue: hci4 hci_rx_work [ 370.016438][ T5812] Call Trace: [ 370.016450][ T5812] [ 370.016462][ T5812] dump_stack_lvl+0xe8/0x150 [ 370.016499][ T5812] print_report+0xba/0x230 [ 370.016531][ T5812] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.016569][ T5812] kasan_report+0x117/0x150 [ 370.016609][ T5812] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.016643][ T5812] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.016675][ T5812] l2cap_connect_cfm+0x368/0x1390 [ 370.016706][ T5812] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 370.016733][ T5812] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 370.016766][ T5812] ? mutex_lock_nested+0x152/0x1d0 [ 370.016789][ T5812] ? hci_connect_cfm+0x2c/0x140 [ 370.016821][ T5812] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 370.016845][ T5812] hci_connect_cfm+0x95/0x140 [ 370.017401][ T5812] le_conn_complete_evt+0xf65/0x1430 [ 370.017463][ T5812] ? irqentry_exit+0x59e/0x620 [ 370.017626][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 370.017671][ T5812] ? skb_pull_data+0xfb/0x200 [ 370.017713][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 370.017753][ T5812] hci_event_packet+0x7af/0x12c0 [ 370.018002][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 370.018042][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 370.018074][ T5812] ? preempt_schedule_common+0x82/0xd0 [ 370.018110][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 370.018145][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 370.018174][ T5812] hci_rx_work+0x3ee/0x1030 [ 370.018208][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 370.018240][ T5812] ? process_scheduled_works+0xa25/0x1830 [ 370.018278][ T5812] process_scheduled_works+0xb02/0x1830 [ 370.018335][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.018374][ T5812] ? assign_work+0x3d5/0x5e0 [ 370.018423][ T5812] worker_thread+0xa50/0xfc0 [ 370.018482][ T5812] kthread+0x388/0x470 [ 370.018518][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 370.018548][ T5812] ? __pfx_kthread+0x10/0x10 [ 370.018687][ T5812] ret_from_fork+0x51e/0xb90 [ 370.018726][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 370.018758][ T5812] ? __switch_to+0xc7d/0x1450 [ 370.018788][ T5812] ? __pfx_kthread+0x10/0x10 [ 370.018812][ T5812] ret_from_fork_asm+0x1a/0x30 [ 370.018844][ T5812] [ 370.018853][ T5812] [ 370.018859][ T5812] Allocated by task 5812: [ 370.018872][ T5812] kasan_save_track+0x3e/0x80 [ 370.018902][ T5812] __kasan_kmalloc+0x93/0xb0 [ 370.018931][ T5812] __kmalloc_noprof+0x3e7/0x7b0 [ 370.018963][ T5812] sk_prot_alloc+0xe7/0x210 [ 370.018989][ T5812] sk_alloc+0x3a/0x390 [ 370.019014][ T5812] bt_sock_alloc+0x3b/0x310 [ 370.019042][ T5812] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 370.019068][ T5812] l2cap_connect_cfm+0x368/0x1390 [ 370.019088][ T5812] hci_connect_cfm+0x95/0x140 [ 370.019118][ T5812] le_conn_complete_evt+0xf65/0x1430 [ 370.019150][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 370.019179][ T5812] hci_event_packet+0x7af/0x12c0 [ 370.019203][ T5812] hci_rx_work+0x3ee/0x1030 [ 370.019227][ T5812] process_scheduled_works+0xb02/0x1830 [ 370.019255][ T5812] worker_thread+0xa50/0xfc0 [ 370.019294][ T5812] kthread+0x388/0x470 [ 370.019314][ T5812] ret_from_fork+0x51e/0xb90 [ 370.019496][ T5812] ret_from_fork_asm+0x1a/0x30 [ 370.019524][ T5812] [ 370.019530][ T5812] Freed by task 7451: [ 370.019541][ T5812] kasan_save_track+0x3e/0x80 [ 370.019569][ T5812] kasan_save_free_info+0x46/0x50 [ 370.019593][ T5812] __kasan_slab_free+0x5c/0x80 [ 370.019621][ T5812] kfree+0x1c1/0x6c0 [ 370.019648][ T5812] __sk_destruct+0x626/0x880 [ 370.019675][ T5812] l2cap_sock_cleanup_listen+0xe0/0x440 [ 370.019698][ T5812] l2cap_sock_release+0x6e/0x270 [ 370.019718][ T5812] sock_close+0xc3/0x240 [ 370.019735][ T5812] __fput+0x461/0xa90 [ 370.019757][ T5812] task_work_run+0x1d9/0x270 [ 370.019779][ T5812] get_signal+0x11c3/0x1310 [ 370.019805][ T5812] arch_do_signal_or_restart+0xbc/0x830 [ 370.019831][ T5812] exit_to_user_mode_loop+0x86/0x480 [ 370.019969][ T5812] do_syscall_64+0x32d/0xf80 [ 370.020001][ T5812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.020024][ T5812] [ 370.020029][ T5812] The buggy address belongs to the object at ffff88803be10000 [ 370.020029][ T5812] which belongs to the cache kmalloc-2k of size 2048 [ 370.020050][ T5812] The buggy address is located 1968 bytes inside of [ 370.020050][ T5812] freed 2048-byte region [ffff88803be10000, ffff88803be10800) [ 370.020075][ T5812] [ 370.020082][ T5812] The buggy address belongs to the physical page: [ 370.020108][ T5812] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3be10 [ 370.020129][ T5812] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 370.020150][ T5812] flags: 0x80000000000040(head|node=0|zone=1) [ 370.020176][ T5812] page_type: f5(slab) [ 370.020199][ T5812] raw: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 370.020218][ T5812] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 370.020240][ T5812] head: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 370.020259][ T5812] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 370.020280][ T5812] head: 0080000000000003 ffffea0000ef8401 00000000ffffffff 00000000ffffffff [ 370.020299][ T5812] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 370.020312][ T5812] page dumped because: kasan: bad access detected [ 370.020330][ T5812] page_owner tracks the page as allocated [ 370.020358][ T5812] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5804, tgid 5804 (syz-executor), ts 116809556342, free_ts 116808957600 [ 370.020400][ T5812] post_alloc_hook+0x231/0x280 [ 370.020434][ T5812] get_page_from_freelist+0x28bb/0x2950 [ 370.020456][ T5812] __alloc_frozen_pages_noprof+0x18d/0x380 [ 370.020478][ T5812] allocate_slab+0x77/0x660 [ 370.020502][ T5812] refill_objects+0x334/0x3c0 [ 370.020524][ T5812] __pcs_replace_empty_main+0x328/0x5f0 [ 370.020549][ T5812] __kmalloc_cache_noprof+0x44e/0x690 [ 370.020581][ T5812] device_create+0x13d/0x300 [ 370.020600][ T5812] macvtap_device_event+0x2dc/0x400 [ 370.020630][ T5812] notifier_call_chain+0x1be/0x400 [ 370.020649][ T5812] register_netdevice+0x1751/0x1d10 [ 370.020682][ T5812] macvlan_common_newlink+0x12af/0x1a40 [ 370.020707][ T5812] macvtap_newlink+0x13c/0x1b0 [ 370.020734][ T5812] rtnl_newlink_create+0x329/0xb70 [ 370.020762][ T5812] rtnl_newlink+0x1666/0x1be0 [ 370.020784][ T5812] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 370.020806][ T5812] page last free pid 5804 tgid 5804 stack trace: [ 370.020819][ T5812] __free_frozen_pages+0xfe3/0x1170 [ 370.020854][ T5812] __slab_free+0x24f/0x2a0 [ 370.020972][ T5812] qlist_free_all+0x97/0x100 [ 370.021000][ T5812] kasan_quarantine_reduce+0x148/0x160 [ 370.021027][ T5812] __kasan_slab_alloc+0x22/0x80 [ 370.021056][ T5812] __kmalloc_cache_noprof+0x338/0x690 [ 370.021088][ T5812] ref_tracker_alloc+0x15e/0x4a0 [ 370.021109][ T5812] register_netdevice+0x15e3/0x1d10 [ 370.021139][ T5812] macvlan_common_newlink+0x12af/0x1a40 [ 370.021164][ T5812] macvtap_newlink+0x13c/0x1b0 [ 370.021192][ T5812] rtnl_newlink_create+0x329/0xb70 [ 370.021217][ T5812] rtnl_newlink+0x1666/0x1be0 [ 370.021239][ T5812] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 370.021261][ T5812] netlink_rcv_skb+0x232/0x4b0 [ 370.021282][ T5812] netlink_unicast+0x831/0x9f0 [ 370.021442][ T5812] netlink_sendmsg+0x813/0xb40 [ 370.021469][ T5812] [ 370.021475][ T5812] Memory state around the buggy address: [ 370.021488][ T5812] ffff88803be10680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.021504][ T5812] ffff88803be10700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.021519][ T5812] >ffff88803be10780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 370.021531][ T5812] ^ [ 370.021544][ T5812] ffff88803be10800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 370.021560][ T5812] ffff88803be10880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 370.021572][ T5812] ================================================================== [ 370.021609][ T5812] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 370.021629][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.021656][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.021673][ T5812] Workqueue: hci4 hci_rx_work [ 370.021704][ T5812] Call Trace: [ 370.021716][ T5812] [ 370.021726][ T5812] vpanic+0x56c/0xa60 [ 370.021772][ T5812] ? __pfx_vpanic+0x10/0x10 [ 370.021806][ T5812] ? __pfx___schedule+0x10/0x10 [ 370.021838][ T5812] panic+0xc5/0xd0 [ 370.021869][ T5812] ? __pfx_panic+0x10/0x10 [ 370.021904][ T5812] ? preempt_schedule_common+0x82/0xd0 [ 370.021936][ T5812] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.021968][ T5812] check_panic_on_warn+0x89/0xb0 [ 370.021994][ T5812] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.022021][ T5812] end_report+0x73/0x180 [ 370.022054][ T5812] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.022082][ T5812] kasan_report+0x128/0x150 [ 370.022118][ T5812] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.022150][ T5812] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 370.022181][ T5812] l2cap_connect_cfm+0x368/0x1390 [ 370.022210][ T5812] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 370.022235][ T5812] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 370.022267][ T5812] ? mutex_lock_nested+0x152/0x1d0 [ 370.022290][ T5812] ? hci_connect_cfm+0x2c/0x140 [ 370.022321][ T5812] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 370.022356][ T5812] hci_connect_cfm+0x95/0x140 [ 370.022391][ T5812] le_conn_complete_evt+0xf65/0x1430 [ 370.022427][ T5812] ? irqentry_exit+0x59e/0x620 [ 370.022469][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 370.022503][ T5812] ? skb_pull_data+0xfb/0x200 [ 370.022538][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 370.022576][ T5812] hci_event_packet+0x7af/0x12c0 [ 370.022608][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 370.022643][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 370.022670][ T5812] ? preempt_schedule_common+0x82/0xd0 [ 370.022700][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 370.022730][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 370.022755][ T5812] hci_rx_work+0x3ee/0x1030 [ 370.022786][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 370.022814][ T5812] ? process_scheduled_works+0xa25/0x1830 [ 370.022847][ T5812] process_scheduled_works+0xb02/0x1830 [ 370.022895][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.022930][ T5812] ? assign_work+0x3d5/0x5e0 [ 370.022963][ T5812] worker_thread+0xa50/0xfc0 [ 370.023011][ T5812] kthread+0x388/0x470 [ 370.023035][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 370.023066][ T5812] ? __pfx_kthread+0x10/0x10 [ 370.023091][ T5812] ret_from_fork+0x51e/0xb90 [ 370.023125][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 370.023158][ T5812] ? __switch_to+0xc7d/0x1450 [ 370.023186][ T5812] ? __pfx_kthread+0x10/0x10 [ 370.023210][ T5812] ret_from_fork_asm+0x1a/0x30 [ 370.023241][ T5812] [ 370.024040][ T5812] Kernel Offset: disabled