last executing test programs: 27.866082475s ago: executing program 4 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000c0147c67734ad63808d022d100f0ffffffffffffff000000000000000000000010272c76c3bf2121a326e8b9515acef3bda7da91dfcb126d91472d8bcdf508e850adcbd41a20e33d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000580)={'macvtap0\x00', 0xcc}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000002405804870000000000000109022d00010000000009040002010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00!\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x5d7000000000000, 0x82442) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000080)={r8}, &(0x7f0000000280)=0x8) syz_io_uring_setup(0x64be, &(0x7f0000000200)={0x0, 0x9cc6, 0x20000, 0x3, 0x9e}, &(0x7f0000000300)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x102, &(0x7f0000000340)={0x0, 0x8977, 0x4, 0x0, 0x106}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r11}}) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 23.757308069s ago: executing program 4 (id=114): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x1ccf, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x1ea}, &(0x7f0000000180)=0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r8}, 0x18) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1409, 0x1, 0x0, 0x0, "", [{{0x4, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0xa, 0x33, 'wg0\x00'}}]}, 0x38}}, 0x0) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x3) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 22.865699636s ago: executing program 4 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003e00)={0x0, [{0x2, 0x4a0, 0x1, &(0x7f00000000c0)="b40b5d5b0f3310077e5bcbea6bb4701eb09b6cf54405062a6016170246705b8fbd5284e4f03ce6a9456ef5d1cad9de6f3850b03c5682c0e0929e6c5dce648ccd5875e33588ae1a4dda8e3bf182778c044f5b4fdeb65c2ce42676169280999814ddf26c0206b3db277782482bb10fbd95a86b68ae0f719d2be1704c7878160ce0566c4cfcf35c33c31423790a62df1aee23d51350"}, {0x1, 0x6a8, 0x80, &(0x7f0000000280)="ba7f68150840f1575553d6cc675bcf47e0fde0806a79f064cc73a29218ae6c446a9c632afa3d97d4a121df2e92cce591a2b2fee764a9a379bb8d9784049b368ee2b6cdf3f69ef9518a5480e59164674a6a44339662e1d89966f46ae51fdec2b7328370152db539ce43226c617501a3687c1b8be5f68304892cb490924ae0ca656927a78c794d660c0df28fe50ebbd7343d1908048f7763b08c1173cabdabab5b5a68f5dc3e9281261bff44bb9bc83f3dc92018536dbb8f88f0740c307f6dcc8a2d5c7c2b8ca62f6232fea78d9fd0ca06260d0b8199"}, {0x3, 0xe8, 0x4, &(0x7f0000000180)="8faa3d327c2e88805b1f00f29bb51c3316f25d247447c034d8e97ed829"}, {0x2, 0x630, 0x7, &(0x7f0000000380)="7c4a507c8957312443b4624309e44da8126bb00084029b3e72877353998224a7150d4bea7e33f8bd52fb865de9a24033c1f8895f5309614206c7c452c9ca92a013526c580e4484a75c0f936464939a164658ae3fc1811b071ad419fad7afcd88ab801444314de5f6ef29c5269b9482b561e142a8e9201cd586f1b10e13cba8798146238dc53c86cdb2f785a35f692252fa90783f20889ad2e0255808531c2afe0979bdfbbcded2468c83760e77cba2469b08b48bccc38b6b2bf4e5b81137aacee3a130a2ed87"}, {0x2, 0x508, 0x5, &(0x7f0000000480)="de201a0b2ec8e1d2b6ebe81f206705dda2ce36ae3ce41d2ca937654dad032aa4ed19fe60956ba94539158efd753a7ad5e5e75749c475028b46edda90ac6271b4a60f2f195fe4291791e2f2abbe8466afcd4639ca8f18aec998211c93664c0c440842fed9c6915ea4c410a5faf2a8bd02cbee685b93ba81614e35dbfdafe55fccc062e1f744382faa3b7180d38e77ac13861c11f348e43e3e6ee4b9971008f4b867"}, {0x1, 0x8000, 0xffffc737, &(0x7f0000000ac0)="381417836335d85806786a34c3d06cbd3fc40ea101613339d48f3d2832dee1318dead2287218a189aff0d883786f0bc2b694998250c71597e0857802f2010f370a48bc1b3bed29727476fbfd9f4b7d525204fc665cc3ba36cead203a4d897b757423a420643812031f6523a0a5e20bffce54378be739bf55c2b934a912b9a32cbc129636ec6978c0fb1cc719a6b0ed7e57d0f79cfeb376f4b7cb80b13c13d1992ccc0e47a63b1f2428ec0ce60bed472b654435e1df8b7f4007ad0c411cf1c1d60372335f55cf1add6e15b37ce1916bb2ac1043d9937379905ff2ef431968744da845bd314579e30846e1102e372d311f3e326371362c36b51e6ef196f89b3b0ce17334336fd6ca5e55665200a5501588c891225b080b91e7eb6addfdced916c46b7e8590bd087b0852cf67edf6bb896245d11b200d6907ca4fd58b6c062ed0ed055f7eba9f254e0749ee9943ab6b83565a970ef8a2099f21f717d6641ff2460dcb912485012fa4df8fd7013d654b93f5326fe083f2aac595792ddcee43eb7d14b35a21fa165264b43b7aca6b53e09c445c5f001d5351eb5fd6ea003b62bbe9e9772eb557a6a871b14a356c5ed2571e00610e9fc5328e5b408c2dc9afb5419b83108370de1845d92c443151fa5a1b525741adb86d75e4cc9017e8ea996439db3028af9b89c66d0325f2d0a795534981d431d15c4e133825a18cad91dd7571f8c038ecfcfb9353bf9c022ab2fad9f675029d4017f84415d0bd0712681def0daca8434af27190e30841cc4a369d5fafd15bfd9a29c0013ddc097fffe3ed0908aed24783108a04c70118d3438ef3e71986e4ce2f6d117e35b663907f014845e1c7bb6a711b722e7b61a69a624b99358caf85d2d93326e73468796fcd00331b467c21e00597529b9434748651b1555d4eae33a84ddc71c22cea4439b37dbc6d6317a78d187b3b0b7cc360d6d2e8a087df0e3bed7495111b60df405e6b70b9e84ecc9323062e03fe44917ba5afce6f91c0416ad7470e5817d79b9be578db63b3fd470e69d8e3a5d6eda4c8acdf02914951b732001f4b993d3d61baf07382e4a925e2aea13f18028a335c4d8e98949ccbbc9d5e056dcedb861393c6490e6bcfec9bcd7875d19f6dc75ef23fd2ba8f4aaf5ac058b8862386e409746833bb8e5006d4fc79a0bacc6f3ae54523eb902e1a1a3b28ec04aaf546b63a7d1f87c5da868e232567570263dce749940bcae37fa7985a6a8f4c8ccd237ec0624d10775f1a734c511b04576af12f623dbb49d6baf6eea4a9c2f2fb25a5bba35e834a11beb7832e3bb39327077b9711333333d2f62827f0b9723e9c111d45ab9eba77ad370892ceedd9cd12f99640bf406e185fa8d5057c43ff02048921aec3da0ba9829e125b0fd5f4c4f94225ab7b8cd615b0e32f435041a46e69f537f6c24d7bb3ad1a654c323b2e60b576f142aeeeacef5dd2543bc72544bd40054b91e674e87b584849de663fade1764ce6215f40d7f89b08c5ea3ef20e252e3e155194ee0a27bd54f3848b8be8085410eaf3e72f6739db51e19988a92e4afc08dfa75f87d2d07c6ea38c12fc60d900a5899a76d77f4a39bfb37d0425c3a76ffaa7f2b8079b1e33016fb54403add93ffe5d0786012f974715bfc944a74eb62d186c2f0b6cbcba2cc3c4fe9c77f04503862a6cbdbc32c6d804a5d10a1209e3003886b14d74c3b3351b3c0aefab24e45a0e4099a751381dc3466c944253bfb30039e0cba938af3b1893c31c829d2305995624b5e238605d5ad8fc6009437d42a16a045195c0c589936c50925bf7cfbde9a501b4b922244e9b4ea2445b6e29a2f6c7925221ef4c186016bba2085a494bec43038f236119974ac7d90a1fd017f4efce63bebcfb2550d3febcc3324c5be609d31503f65c9be92a4e9e453bbd8b0853ee4d2855a120dabbbffa077c364a6e63ff931303ac156b64183960297001cea8dc2c9d2d3c218eb509ab4e4a7c9b9447dcc106e5f7d956ad7eb1c9759dbc34fdc5e2677bee35eb26981b94c6bd4708829c5251752f574ce847deff27897b9a3b493d64e9dc43f7a05e93c9f7716a0c46dd20d045583ea733dcb397747ef8b1b17d8c01fbf462af7dddb9b9e65e57161df2684308648185f60f8168c544901f2a3f12c8146682711c125b2a9cbdd6a44a1d011585c9f39880bb94414cce366bce07eaac527499d185a3e17032353b3b9c8c0851928f07acc0351c37e6085d4dd40df2c7692f0a9b365c22e8df149510361579df4a9311d53303420d04d7bbc5dc41cad751710f49048f9bd0806a1e417f4530fc1602917dad0ffbc22dc1f38b73ae907987ec286eb3aef69fa0d652771a8efd8cdd0535bc967bf4e94159a2c9d35d2e55f5ef1f97aba1023c545ea51144e7b9c996e227113c0831a33ef50844116244b2d947ffd3ba8cd3f0fc87637c40c5e4b33c68267db654dc97eebb19d906eecfd8d7e17671a8a292f89a225837af0e8413032a8caac53ca7fe603414852f8a2174afc41fae49ba0e1edfb68a93a554abcf84462d5a76c2e4663ca6a1d6ddd0cf4f89487c28b3bdc583ed71b291790fa091fd8a925d18f23824c4f1e83c757c57b18a42cb203f84529ed4090df7a4f9c3d5ffc98c657332bd2c2c5d56377b3a660f9f101da44284969e05d494a46bddf584fa76bfab97a6d4f73ea90c1408119852eb631af29468b2031d770cdfce763db4daa18472358cb81670b7ca41467d4dba87035509bb533f26369d3fac9de86024b291d949e649e63dfae066f9ff910f0e6bb6bde3d0370faeda88636b43a575475fefb264ecf3ecfc61fe550b596c6211f05df6dc8661a32614894f60b6c8f5b4cfb13824ef596c0796575755fc917600023815b242e1d16ebba83d962282dc96a3061108f527ba35a85b50c5dde3b995abc73eceb90a8bdcd7a6b2e8b4fda015a7c8f0b00567543a02e522640e06109b86603a0f3ad2ab1f821b08062edec060160cc8c12fc1ed18e264293736b6c2d83b823ba978cf5c59e90202a0547d50ebd893a89d5fd6c5e26c3c3f63ab558a47f99448454f7917062c7ae5a8a110632be1f210db28b0a0980c7ac4e1edc13ea7e3e53cbace5875982a06c80057c05d984d99d9890cfd6044fdf1631ced67bfb195c1daddd9821967a71822e63f308d2611fd346af2cbfa3d70ce13d61ad41efc34875d6513e3938cd2b376709a57f93f1725198d587a4be47fb75323bee51eeaa4ef48e3c6f195c1663c689b3cb55a0ce22a4a52bb74840f63c4ec4ff86634b5dda3dacc95c818b6bd0cd8908bc196f6fed244f42395a27a97f180b9d683d577f61e3a98529760ef5c5a1cd173921a13c6120aff4ce1d00b5496a137904f536f2436ba117b3ee0cdce6cf8cf8ce186461f69dcb26b5c3699008ad9df7124ccda3455bb5c5b245ab3531fcdb8724be787d18bf16037889ddbf815b65b25f8c2ed6dad124f607a4e74a1197269dbb1963d71704ab0ec8b84a1f5803d443bbecffca96a3d1b0da29c65189295cef9e3ebba28556d7283ad795810b42d2af7d78279892befc8d3a5cf18b47caee24d5888f99eb8fa93f2cbf904449df5bcede81181426d2ed4e197a18182bf63f00b1e09d07c7d382f2cad2f8fa1cd36682d4cc4c6c39f0d1a8aca225f98c6302ff46dae94a59008c6bf81c579b4131831fdedd38653f5afca56c6bcb604e7523781cc38a5292f4329f2be9ff646b4af1963e9921c4cdcc44ce11d4f8cb3912cc3ba6de6f676363faf38357388291e32d5b24677320d5d3896bcf7380d40b3728ddd113974a22405c1c3af5f5c987683dbbf83e76de70c9a2b32e2a71ff6001ce439e658d9f9356e42114d9230d9cb51a81f9d89d2bfad19c28049e56ea4f72192c18ca9a88f51089cf1d38508a157f54124832ae54e709abceb9bb4a5d2f65dce3b5a02646b9a061778733ddb92785e9ba38bff6cdfda73c8eb6863230a0d9e4c7c4a815e1a1bf63bd242db9e73e5db5157cbd09f92575a12b14614d7a8c3b37598bb72d5c3f70a00e68507932dab9d4a04136ae21b02f51ba9530e972d2b83b389f62deaac6d830745a1ab3c6d570a101c9fb7dd947113091b88800533af4feccfbef57546962e80c0662db350a0e1252aee22c39a5102d47751ec309501afbd96483c750452525b2c5e71cfffc06c4911b2893093ddbd5858239ebcb6b547f66ed996ad80f20ce60c02eefbb59838ad338c567d0fb346e980f11b609dd19add8aa5e3a83c9c5f851fb6e2e6f97dd792b68d66defd4bad63c14c87d9286f10688d0b0bfc703fd0d2448976acba895183c7fe4870117ee96691c7e8dff505e13a4c3ac970dc298b5f54700a59a44751d90a4c472ac9573704dd6ea8f33108b3d5354385f8f4ffc9dec02a9f258cd6eeab4d1b34fc01b3bfdda5b69dbc0fdb8eeaa28d0d089b1596e8e7a357523423e7709b9a786f57db42649fe6232efcd147152e2570335acda13fb64b1821d369177d389484b81554b1b94ae3c5c57980d0d693d882c754a317c2563dcba143ad33adab69cf8f6ab31ca822e81575b651f8ed154a58b25fd607af16f81ae57065cfabdf01f5e389453eed045c8ea28de25cf31a1a83ccb44e627f1ff47a447fd0a74c2301d8f10674321c7c57c422996c0bb4a4ef010903030c711220a81f4fab4acfeb7479f3090a6a03b5eca86dadd66d8a6920d741a57fc1fbb424f8c1aa46ad01d7d60d881ef6ec0ca83adeae51c5da1366b4f4d77cd1f429d862774a4b264ad7596028d3698fbcb57974d0721be9a42a06507fa09608ca3851e3922f356e773276a2f9ece30ede81504bc76160d26f64bb1df9928b4e1614a67a859613d8239fe0ffc4028ab5df5286cb23c0e587deb038ab6a48af2054983e5276f27116cbd4e9fdba9eca4abec11564d4f8ccc660bca4d8547cfcedbb624ace2583cdc061148dcc27ec2472e0223797fe4d94bf529e69d5763c79b8c5ff53310fdf426e0786e13cde1d1db623dad10b250f462f8d3e956076dc4358cf5e7bee27c3e305b51c672d2095e6c15b6594b1dd5ed597a2b8a98122f9e515f17706a3e75d05e684a117bf9ee6f5ec6941eccf859593442337a7bb7f49257d7c0bc38b20d72c285791a0cd93f2232935b6755f3c9fb95b8ed7e3655c99133962003ef0218afb6d6d6c284ec0901f806f5c0039c2873516a8c46c3f13d6166f6e33f15ba46ba9b1ac7ab00347c2eac352f4834e6eb69fc6ad58e366f7b90254949f7d26f0af96d4322ccc6da86bfb6ffefa4fdb0e86ce00016e62f70656b46032a5656cb7091bb437fc571c47ac573f525a496dfc215515d6903afd0081bac6b2966e4fb8d1b6ac3c8b33ed8d8c902b7210e218f7895f13449a5e640432c0357879179cad68bd79dc38a764efe1906001f1479164de15dbf3cb66bfe07f6bed71725daf964dc4a44281ba9e65ac3f2402f5d49546743f61d99ebb9a8c5235576c8935671404663b9147397fad85bd589af96287adba4338dcfc80a2d797f5309b47d71d7e8b4b032a794c5c5866a37e3d17ece75dcf6169f7d68dff906610e07b2381f8fb6dcee218809a79c831cc027b166dd00af53184c4132ea5dac394deec2a57fb99b9dde99e07b90c3a6049be0a0e144d980b983bfe397c4b0d3e73c6a84fdde10b43f4463278105be4ea6493e283f02cce18dc8b18f31950afd3fa6e53f9d5ce030ff978b5b78fff008a379918396191109e58955d75369d353dace5c3b162580b69a02ae72e981903ce7c7ff78edeec95792f1d36"}, {0x0, 0x5f8, 0x5, &(0x7f0000000540)="6c14319f76f081988dac05f24b10a8095bfc2a0d1743ab5630dbdf6504235627e47489e347e7bbdb99b8aa0958323d955a775a34f37926a7af5cf0de8cb715e78a4b91bff954432aa137bd5851952ff9b47c5423edbcd3fb6f563e7b95f544bbd44462b5e50a0f962be685537a2168f3068e8fb2f21ac03c1ac3eeaf490d3ea28da8361d891565e0c297feedc994618a939b52156bc1816c15a54d9aabbe49fe35d8947906a827873ddc2dbfe223a8899f69405a9d0a9fb82432fa5ad2c6d4"}, {0x3, 0x6b8, 0x0, &(0x7f0000000600)="484485a3d6a6d1981d87b902decb39965f5240a7738bc229e2de0931adaadf128c71dfda69a29849259f6fb82faf255cfb96f6b12d671a8e9c58a9382b21a60cb8bc8e694775072b7e980f66cba5e27ff8c22db3d749a27799e4bd6b0ad814056e1e6dd49c27e14620dfcb79df81d24ada42c334d4102c218b9791ed50e07efea74c68606cb3c5bb030a21a3abc9c4f3de8f0141f9656f7672601b95627e8acad9014884c48f84c6a9237e1cddc00357d0070bf4ca4339533fe9a08046494270c64f47ec6ffa859608b7598d2e88116b7f081ee7553fe4"}, {0x0, 0x180, 0x0, &(0x7f00000001c0)="5b043afd70dc352718a4ed0d3b06a5a0840c3823731ea5198055fffcd6e933a4e98ac9fc8e9c346ed124a8788378bad2"}, {0x2, 0x710, 0x0, &(0x7f0000000700)="72c43e75f01d7df856f9bcf498b5d4209c1aa9a50989d34b11331688c9aed23c465a33de4b2ca4a67f1b7cdabccb87e2fc2c962a7e234600e4df44100961854834bfd814cf226951ce89775e7a880dff8356795f24ae48f8d710b0376fbbf3520a903c1d6b836039132b3e6bbb7d07d75d345e49af1013efbc72cd4fdbba0e583d11c6a74d3f819986d4b1ae4e8a2ccbab4b5f5f61cd87750ffd98b247613fe74469e1029cd97e0dfd5f29fa11e107e6c33eaf374075b2dec4b80a20fc5d41d41213e07d3503f7dec11c7e7f74bdba1f088073600e9df7672fa3f9ab2f14be2a3d33"}, {0x2, 0x7b0, 0x1, &(0x7f0000001ac0)="06cf11710de4024d6e3313cd4df61aa04ba583ae7e32d883bb8dd7df8b994c7c511edc601bfe825c5ed910712b3cd2cdd704e4a611e512ab2042785c420f5194f2e5c3f1095663c1605fa22eb4954a1de48002123a7a3f9651b0d4110a5ea2b71e00d01330e115e93e55f1af97cd7b18cedcdef71d330b462d20e95b6c982c95c7a3af82e01fe4faf925c47dde88b3f65916dcb9d13b6b907c8e9158fab4aaab64b94a59ae8c43d01b222654acf16b3e2bdaad09475ad7db757c354f1465f47894892a5e8bfc067562724ebbab7f41ba58e3217ba2b8979a213d56a74488864099ca6675698bf680c8f9824aa3ce2997df2a7ab76b87"}, {0x2, 0x8000, 0x7, &(0x7f0000001bc0)="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"}, {0x1, 0x8000, 0x3, &(0x7f0000002bc0)="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"}, {0x2, 0x540, 0x9, &(0x7f0000003bc0)="1b35b9c3970c765d1faf471a21adbd1ba61ed8a7791dbce0d996baa792a07988d493d672a1cf68163ed5cb2043f513d79faaeebf2a593b259748cb8edf0c41ffcb2f8d60d136b48f5c765cb0a8ea449826e2c1d117e4b24709984e69a30a4ee4b5f760fa671b4bfc70012ab39ffcf0bf8e66a3e54235205af5152de87e355dd4b3210a59316678260d16d337dfac83f8ac59c7af876fdaa49fdb4c47ab8438212b7be7db4bed8c87"}, {0x0, 0x598, 0xbce, &(0x7f0000003c80)="7e7c08297316c38547cfb57cc8bf8ce1f6b847a5184d5121df44a6e2f66d75166005077ea4e2a4038b889ce052c7638567137d32eb5b57e67e059840f1421ef934765139d2b8d87b818f81716048d15208d74aa372329432ea8f00a2f0c2039c14b263e88e38add69ec11fd7adba211f83fc9e444e6cfd2007e87cfd344a83fc2491cf63a83c68acd035785e160947954a181f511665a6741e6b0064365414be4dacd854f0067a93271f74450e77780f225c03"}, {0x1, 0x530, 0x8b, &(0x7f0000003d40)="95078a372119f9de0552bb71ad2b5d9b4c5588a38c919aa4c61a28f1cc983fe2b9ebb8028f1c52272617cff1ea3ab96399c39a8287d7b8096010b19710279f9d747106e8b546c239d43fe2c456febb6a00f3a7c1a0d806fb55a861be04cfc332f3435eeea2fa40656c316019380669875cd5fa74efdd82651bed1edde3b294ef65d3a4f88c2e6079691f3ba3f6f7f6deb89169928cd3130c3e5de4070c80077209999fe4bc18"}]}) 22.319810001s ago: executing program 4 (id=122): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffff7, @loopback, 0x6}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="56284650cab18b187f84df7649158ea52c750afe", 0x14}, {&(0x7f00000008c0)="f7b3f7457d6e2d376c3a9795ac045759f5f7b8dea4de27b09059d4919142db8255410b2c41f2313aa0d71ce75d9d2fb342a49baee1adc21a6ded2c1e5a62a31584a84d47d8937d312163233dce18c5df4f9f4cbe31be90764d6983b5b937b716bb84a201ede211955d306c01fa13f35626f0d1a6f34e2cc5c5baaa82e9e735f04bf1dd780f0b78384897ad4581b7907e7e985b03da0a563735c5b5d28c983bdddadfb69d6846662847d5abd58466a1aafaf22f885841925b4c4cf57e0acef6b5ad09c22710af0829cb2327de6e6967e22f323de297c2be0b0a7f00b5154d10ebf0df0e431bd634541b5faf37103d86b05c91ffa8", 0xf4}, {&(0x7f00000009c0)="b740e6eb8f33b60677cd8b2fa8855bf3fe803fd6e8d5b1aae89f1f43b4f17fe363c3c5105d4b695863ae6607cf9692ac84db0a5863d85a9574e7963ac67722edf5f63b35af19002f53bbf29178da7e70979a3d06559771ab7cf12264fc24cdb4a0ab4c7b0d76934f0367d960fe52e3f5c6a9d95857b2877bd05dd11e7412ae6f076051742f12ff29b303993802fc39863bfb36934cb97216f770dcabdfc4b5b1554396643de7318ca852ea14e9eedf79cadfb477d2d4702d717d6b18ccf491ead723cece67468cf309afd3b84bdd96feede7dc4d", 0xd4}, {&(0x7f0000000ac0)="bc055a606ccd731e204395e7032e8694d74dab84786f1cab7e873c09e288e4f3be737d4b4c81ac64c82ea2782278a5dd5454cf12c9f25c41e1f54ba62c2a590e996691cc351e73b3fe041b490efb06ddc1add63b9d62ed1191a484755845929dae7b7f56b2b6a258ac6bed21deadbb35ed87b033ace9fd390c024b1e818579ca8c48d240d207c2f00d15c3104804021465a32fe968e26b510420da43e12812ceed45fa1fb704dd7993861f7d6bea998d09d01169fd606643e90fdf7d38d1cc41b36b589f481ab0bf54f3282854eeae5c879aa0be23837342e6d2b966d33356ad10dc489ea845a87e55c7336369300a8b", 0xf0}], 0x4, &(0x7f0000000bc0)=[{0xf8, 0x11, 0x4000000, "19fa817aab99095cc4a8915f360605e008f638d87bd9ec5668da432c85e6161256e50687527973e3b44cf1db6e211fd0985334e8b5c8138d0f044d4ea6de47884e47ff9b2233ef9c2e41412536f950c3476f54f345ce7cdcca2843287d646dbff1df141d3424ab1c9c24842b6d93a2899f5a8d9ace8cd6acc8cb9d58efeb42e64919afdcffc5d1f04ce937adb43c804259d402e85763b5ee8d549af81eb6adfd05c2729d59624eb5c8e5eba02d916b319bab02ef4d968afd6f9078e043442e01f1664c2f74825439df4a142c51d2fc956f5ee91822992156ef312e7deb5f5ad879bd04"}, {0x88, 0x10b, 0x89a7, "b5a89dfa299d44fea08cba1cb8855be4ba13947fb41e0d87987bbfe3c8a3ede7b2338476e5204457fb3bdd18a81dfd50e5a1179d318a419aff3e8114b672bf6440faf07631f33dc268c4c4b0de4e904e046b00dd46b2eab0ded2b59432d2503822004a79b932dd830b8f60f526b6551ea7db226764eebf"}, {0x88, 0x10a, 0x8, "578339e0a23258a5060c1061511606eaa70f473354054e40ed15fecd3f97b55ce3a13940a7c73cf2166207c3d6e6d42609205b0a61b90ad76395fefb775ad44060d58a6bf3f3393d3d3032ca40e6b1f25eb891a543f6ea906f259c7832b6b22512362cad8e5685fecc9aa61c5e4467af31f1da12a6"}], 0x208}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x20, 0x3e, 0xfe}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0xc4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905", @ANYBLOB="89"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240400d1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x202) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000500)={0xe00000, r5, 0x2, {0x800, 0x7ff}, 0x9}, 0x1) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000002"]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r9, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f0000002f00)=""/4091, 0xffb}], 0x5}, 0x1}], 0x1, 0x400120a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 20.794908623s ago: executing program 1 (id=129): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x90, &(0x7f00000006c0)={{0x12, 0x1, 0x341, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x20, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Ww'}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xb, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x6, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xffff, 0xb18, 0xff, 0x40, 0xff, 0xf}, @acm={0x4, 0x24, 0x2, 0x8}, @obex={0x5, 0x24, 0x15, 0x6}, @dmm={0x7, 0x24, 0x14, 0x47e7, 0x9}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x30, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0xfe, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x5, 0x40}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x1, 0x2d, 0x2, 0xff, 0x1}, 0x225, &(0x7f0000000780)={0x5, 0xf, 0x225, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xd, 0x7}, @generic={0xfd, 0x10, 0x1, "6087f4a7162bcaeeb25a8f963c5d66b7a41e1cea8830a4b00e4c337b72b6d88625c04be353eedb79f657ce16f898e7a19af0789afd18242e44890b2ab816eaea4585c8204037dbe69dd406a5c37be629a52f464c024fa859fdb05940019d8b292158fc06c2edd0e8a0d1949b56c157596676d9654033e9869b5f1aead4db33c2f6b58e80d3a677b689b3cb6090c7e7d7318404f6b1dc89b9d2d8a6e8e6dbf0bf67323c476444a8c31436fb612030936d5351a5a6da69a3e18262de70ea371dfe827b5b023cfff332c57f38af0ca06b2971470e7cec02b361e33195551f8ae6c94edf4d53fe7fbe3e45511ff182220909f3896df677c620ca7a4c"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "1531b987882f498bb69c83962acbef55"}, @generic={0xea, 0x10, 0xa, "171dd65c6df6c2f6e8942ae097e955434bed59fbe9c2dc04c7f110ebe144a7ed667414dce4408002c7a69467eb5e69ad4563a27c5a5c1e5443f6094047b3183ed388baa49b81ab5f05691e70a0bf974f2c28a33c608b419aea65068bfa6550401b0888d56d67e42549ae40ab4a53421ab3d2f4f17c887ba301aa72b9e5d849ef76256dbd2cbb64435da1e25b9edd6e0f4159cb83e741a816596fc4f5f81e9729dd1cd9ed562c555e79aab4c4bc8d4f40ed13e0396c7245bf73416d60847e47132a4ef67e128211330aa28921b5bbceb67a73e54f87331f6a49554cc8d543ff7b5929c3bea1be54"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x4, 0x60e}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2c2e862bd7f9e87b772dee839071f83"}]}, 0x4, [{0xe4, &(0x7f00000009c0)=@string={0xe4, 0x3, "45cf730b109379f1a4eee90f684cb124bdf3c100c2f219e1ea111782e00a46bae413fb5a21d42ff90ea8d410e6205b40a0c7498d9ac321ae0ccacb9fdf7cc2864b8d7e3d54e204f1bd1e5714a1707607575dbf46c665da8fdd4d456ce9dfdbc20d43c341e24da082ad4f943aa053e7d2eaaa9060f08ab59c8ec74f43f757ad089aa51d1b5d95dd98f02bc434de3047bca22fc3bade9d4a57ed6a2ac1ee13fc6227d33f46e8e4160e311274ba15de5643071529bc7e12da8793749e604ed50fee655bb1ad9af48be979fadd795a572cf410f9f23f6b36fff30751e7c3fd1cb358887f"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41f}}, {0xf0, &(0x7f0000000b00)=@string={0xf0, 0x3, "e1af98995da377fa5134cd3fafd5e14dcf2c0b5fecdbb5f19c277e593e74eb0f86e79d80b3c5ead1315df33d32811d79bd11b585d3257a884a22626ca1ae9b180ad6360fe7987111d08524bd25c6ab6c53171d36895c746d31ad76f258b8259ac93f9f8a137e8f283526abde23926bf086b1f70a1f0453adb2c4433c22b1e7e9433bfa165139cd822901b9c180d74ede3bd59232f014afd0914a4cebbbf0f37f57e2eea3840b23a758fa2dd80b344d094b972ce2ecdd046528f18c72a03c1fb36b9c7706287eb100cdbd5ffda837e1784299bb8765b70c181def4896d5ce6ae43517b805bfcb76a2921322125617"}}, {0x70, &(0x7f0000000c00)=@string={0x70, 0x3, "528aa4a70328c34e33f464c7fc6a8ef917fcc01472c9cecbcc2d3a18395564c0cba4ff2c98b00c0284ba22ba31d4024b76a842277ec7e026fab26837a9b0453ce9e4b5580842d6d06a17f880d24fcb355a5b1981cc7bced5d51a4225203f5c255e9be03544fbde9ea47fe8ae0d29"}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000140)={0x0, 0x30, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, &(0x7f0000000040)={0x20, 0x30, 0xf6, {0xf6, 0xd, "210edffd3dc6155eaa999e28825f0f500b2048ab59d17254976d9e1d8fb1918ebfe4e837781f124178889091dd8185edee3d4b410317ba6fbfd17d0109f089efa1d6a727d9989c903d7a55f51df819059a4e3af1f423945661ed634823516d018225f1061d15c19857fde0eea2815df43edb50d684839a30b10dd242bc34f629f7e7744a62c1346ac185dbb0eac36676ad24fa23ede0ecda2a4349c32d1f50ab645fdfcca32f1072f41be9005e73743f0021d9fc405bb83a28b2bcaf3b5ca30397e9a88b150713569aba5356ed5ac086af9fe08b40def159182dda9d4874ad2c49a6c373c2604642dbc00d930429b612e6b19f65"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240d}}}, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x0, 0xe, 0x32, "b13b2b1825c131d49b5a4dffd3063bd8df36745dffb17d16c2fc61c7cec89a5983b586e9b59127e1218b44b50d9b03b1d12d"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x21, {0x1f, "817884437cea0308820148ec3c2c4b38c05f8d2e2098bdfa4e6cd197942bf4"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x5e}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000920000002f1800000e0e000009000000048b8b0ed6dffec185797a6a97459f5b8d161e2b5fa3d9578b648a55a92e524011b2efb466ce0c30ff7ef4e38152e98f1e37df09ddd4fb5000eaebd5af0b7e53ff6099a2f946b43428536d80b6ba78d7311d977acd000df05944414c519676c5da56f6e54bb4ffd6b6378c35ea085bb6c17af42760c188bc85bfe0000000000000000000000000000000a2aa6febcb1fc646c694ae5554a491f230fd1f0d12ac5ba2b1230f6015846517c5a796cd619691be6f3a7c755a7c7eae72f1405717b75acf6f42de2d7b21c15f06ab49b74b2f1fd5bd8053ef89a132a46a3fb7cedab80d25fe8e2daabaca6a60ffa0506aaf"], 0x1aa) 19.353766076s ago: executing program 4 (id=134): creat(0x0, 0x11f) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000002}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x496a82, 0xa3) 19.078815793s ago: executing program 2 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000228bd7000705d0943a6ee8967a7fbdbdf25070000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x80, r0, 'id1\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$netlink(0x10, 0x3, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) fcntl$lock(r7, 0x6, &(0x7f0000000580)={0x0, 0x1, 0xffffffff, 0x3}) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{&(0x7f00000005c0)={0xa, 0x4e24, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000600)="1f15cb2fbd4641502e25070ae6092f85c6c3b331e3a76713c7c47fe3", 0x1c}], 0x1, &(0x7f0000000940)=[@rthdrdstopts={{0x58, 0x29, 0x37, {0x3b, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x1, 0x36cb, [0x40, 0x7, 0x8, 0xec2, 0x3, 0x5]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xb}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @rthdr={{0x78, 0x29, 0x39, {0x8, 0xc, 0x1, 0x3, 0x0, [@private2={0xfc, 0x2, '\x00', 0x11}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @dev={0xfe, 0x80, '\x00', 0x1f}]}}}], 0x110}}], 0x1, 0xc000) fcntl$lock(r7, 0x6, &(0x7f0000000440)={0x1, 0x1, 0x1, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 17.617480167s ago: executing program 2 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 14.178751085s ago: executing program 3 (id=141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 14.061503423s ago: executing program 1 (id=142): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) socket$kcm(0x10, 0x2, 0x4) gettid() r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) close(0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106d040cc500000000000109022400010000c04009040000010300000009218100000122a4000905810b"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000004c0), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000000000206c000000fe800000000000000000000000000023feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f"], 0x1a8}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) syz_emit_ethernet(0x7d, &(0x7f00000006c0)=ANY=[@ANYBLOB="aa8faaaaaaaaaaaaaaaaaaaa000d010000c03b0100002b4bf9cf62b937e4a7902dc82fca6d798c611eb10f311cac60cf28b39381cb09ae3591c94318960cda5291caa366416f776dfed450ca37a48067a1cb031f"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 13.945213395s ago: executing program 0 (id=143): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x24, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r1, 0xffffe000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffffb7, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x5}}, 0x20) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x15, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0xfffffffd, 0x101, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 11.692917091s ago: executing program 3 (id=144): syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0xed}], 0x1, 0x1000, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fbffffff0000000003000000850000000f000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0xfdfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00036d00000057b1c87e926ab6fb2d56027386345b383c90174beab906a8f9c37273478f6b0e00b3612e1bd7bb4ba278950c4a812a649008b690fcd8d62267d846ef19634733dc7cdb20661c2219d36297b912c702cb48b0b7df71489442241263658a19ef02fb71977c0b45a58f7728b9dd42"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x76}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000600)=ANY=[], 0x1df) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000206e059b01000000000001090224000100000008090400000103000000092100000001220200090581030000000002cd21389e4e55483c3ca630fdb0abd8f84d601e80572f1626ac9eb325d108cc"], 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x2, 0x8, 0x23, @mcast1, @rand_addr=' \x01\x00', 0x700, 0x1, 0x7fffffff, 0x5}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x12, &(0x7f0000000300)=ANY=[@ANYRES8=r5], &(0x7f0000000600)='syzkaller\x00', 0x206, 0xf7, &(0x7f0000000840)=""/247, 0x40f00, 0x7d, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000740)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x5, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[r1, r7, r7, r1], &(0x7f0000000980)=[{0x5, 0x3, 0xf, 0x2}, {0x3, 0x5, 0xa, 0x2}, {0x2, 0x1, 0x1000000b, 0x1}, {0x3, 0x5, 0xb, 0xc}, {0x1, 0x1, 0x4000003, 0x3}, {0x2, 0x4, 0x0, 0x5}, {0x2, 0x2, 0x5}], 0x10, 0x7}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="080000000000000000000000000000000000000095f124b5554fe06e1871481b30557f9f895e6baf1a597e254a74b793697550a079a40165486664fee92b34d218ade6e70f3a8b4e1b5953fd5138779860e4d75d97678a301a826ecea2e665b945e73b6f88c318147387371b0c649b6e52984a26a9ff58bc7428094de0f107ef411900e8005c16fa65840db9a28cfe2e6637d9f0f05c80c7caa0eeda64bffcf31f37c91301918d8e3fb68b53266ee7b4d8a7bc02f8620e6cc8d6dda336c157ac9b5de88b96648420ffc1335dc5011cde0ce93cbba3c87e1a6abab0e7aa37afc16b073de01d76", @ANYRES16=r5, @ANYRES32, @ANYRES8], 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x3}) ioctl$TUNSETDEBUG(r8, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000d40)) openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x80000, 0x0) 10.603154582s ago: executing program 0 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41dee000000003a49490834eb160000020023"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) close(0x3) 8.020302713s ago: executing program 2 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x1b, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001010}, 0x20000050) 6.70427947s ago: executing program 4 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb5f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40140, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, 0x0) 6.287021512s ago: executing program 32 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb5f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40140, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, 0x0) 6.277921847s ago: executing program 0 (id=149): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4804) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x0, 0xfefffff8}, {0x0, 0x109003ff}, 0xc, 0x3}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101001) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x54, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbff, {0x2, 0x14, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x7, 0x2100}, [@RTA_TABLE={0x8, 0xf, 0x5}, @RTA_METRICS={0x2e, 0x8, 0x0, 0x1, "69e7b6a871a451c93a597b050531e35076ae3a69e97873ae028c2832484ad1da3a16de451c53ff051276"}]}, 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xb90, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f00000000c0)) 6.225202836s ago: executing program 1 (id=150): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0xe0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xcc, 0x1, [@m_ipt={0x34, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x68, 0x8, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x3, 'security\x00', 0x2, 0x4}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) 6.223568171s ago: executing program 3 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 1) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.269012026s ago: executing program 2 (id=152): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000b8e989c8f17e", 0x0, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x3, 0x3b, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0xc6, 0xda, 0x7a, 0x8, 0x6cd, 0x11c, 0xd80d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x81, 0xfd, 0xd8, 0x5, [{{0x9, 0x4, 0x20, 0xd3, 0x1, 0xff, 0xcc, 0x37, 0x4d, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x2, 0x40, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x44, 0x1}]}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 4.342355271s ago: executing program 1 (id=153): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e179cb5ad476155f63ac7da8227fe43adc65377c811dbdd197dbd62f9afaa172ade411e9c0ade4225cc3ab21869bdc"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x4c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 3.608687273s ago: executing program 3 (id=154): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x9}, 0x8) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 3.494921947s ago: executing program 0 (id=155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000710001000000000000000000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffea) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0xad) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x10001) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) r3 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xe, 0x1, 0x0, "3b3ad6f32e978900d10052d0002000000000000000f3ffff05000000ff00ffe8"}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) rt_sigaction(0x7, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000001c0)) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) 3.352632779s ago: executing program 1 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000540)={r7, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000540)={r7, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x8, 0x580}, 0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x801b, 0x7, 0x0, r8}, &(0x7f0000000140)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c000280080006400000000b0900010273797a30000000000900020073797a3200000000140000001100010000000000000000000000000a562afcf07c29b500d4a442b84106bb6596aed607c3145be3c80abbeda9cdc777b1de20fe7c9d8c600293fc2523a13ac0934b206d3bfc8575df0dda765d05b124ae830233e5f69aceb3ee7a70f5145452e0"], 0x70}}, 0x0) 2.114208279s ago: executing program 3 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xfffffffd, 0x5, 0x9, "3000000502000000000000000400", 0x0, 0x0, 0x4a, 0x8, 0x0, 0x4, 0xe}) 1.723040668s ago: executing program 2 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x80000000) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x403, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x4c040) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}]}) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, 0x0, 0x40000080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xa2b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 850.458638ms ago: executing program 3 (id=159): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@initdev, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x190, r0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040800}, 0xc8c3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x41, 0xdc, 0x32, 0x8, 0xb57, 0x2a8d, 0x3374, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x3, 0x0, 0x3, 0x1, 0x2}}]}}]}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x6}, 0x1) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(r5, 0x8004b707, 0x0) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000003440)="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", 0x5ad}], 0x1}}], 0x1, 0x4040005) 691.12454ms ago: executing program 2 (id=160): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x294}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x283, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r5, &(0x7f0000000280)=[{&(0x7f0000000180)="4493", 0x2}], 0x1, r6) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) sendmmsg(r1, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="53236e18ba9ade42eb05df0b", 0xc}], 0x1}}], 0x1, 0x20040000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x7, r1, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) 373.629111ms ago: executing program 0 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0xc0, 0x14, 0x2d}, 0x18) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0xc0, 0x14, 0x2d}, 0x18) 271.141644ms ago: executing program 1 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 0 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xfffffffd, 0x5, 0x9, "3000000502000000000000000400", 0x0, 0x0, 0x4a, 0x8, 0x0, 0x4, 0xe}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4f, 0x3, 0x54, @remote, @loopback, 0x80, 0x20, 0x9, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe36}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000006a00010028bd7000fddbdf250000000000000000080001000200000008000180"], 0x28}, 0x1, 0x0, 0x0, 0x600}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xff8c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0x48) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000300)) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe", 0x39}, {&(0x7f0000000b80)="0210e1ece01a72288810e812642b244d3693e21c76be897127344972c6f8b057643f0830f6fbeea00842be7a6fa751fed7284a760027709f", 0x38}], 0x2}}], 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 75.116458][ T5791] cgroup: Unknown subsys name 'net' [ 75.357176][ T5791] cgroup: Unknown subsys name 'cpuset' [ 75.433059][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.123269][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.261454][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.292553][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.294072][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.295405][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.296167][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.336875][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.338542][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.340391][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.352544][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.362497][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.504303][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.508162][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.512980][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.552953][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.560129][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.630720][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.636782][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.656179][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.663561][ T1240] cfg80211: failed to load regulatory.db [ 81.679366][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.684447][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.685119][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.685897][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.687381][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.691987][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.693804][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.318426][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 82.715348][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 82.839792][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.840992][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.841502][ T5805] bridge_slave_0: entered allmulticast mode [ 82.845327][ T5805] bridge_slave_0: entered promiscuous mode [ 82.918839][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.918987][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.919169][ T5805] bridge_slave_1: entered allmulticast mode [ 82.921843][ T5805] bridge_slave_1: entered promiscuous mode [ 83.267494][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.267927][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 83.337590][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.345212][ T5120] Bluetooth: hci0: command tx timeout [ 83.412478][ T5120] Bluetooth: hci1: command tx timeout [ 83.429159][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 83.572535][ T5120] Bluetooth: hci2: command tx timeout [ 83.703444][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 83.783186][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.783346][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.783465][ T5801] bridge_slave_0: entered allmulticast mode [ 83.784947][ T5801] bridge_slave_0: entered promiscuous mode [ 83.802774][ T5805] team0: Port device team_slave_0 added [ 83.812311][ T5120] Bluetooth: hci4: command tx timeout [ 83.813153][ T5120] Bluetooth: hci3: command tx timeout [ 83.826181][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.826308][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.826482][ T5801] bridge_slave_1: entered allmulticast mode [ 83.829049][ T5801] bridge_slave_1: entered promiscuous mode [ 83.924443][ T5805] team0: Port device team_slave_1 added [ 84.376573][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.384664][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.384680][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.384701][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.585397][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.643589][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.643600][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.643614][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.649945][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.650032][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.650306][ T5809] bridge_slave_0: entered allmulticast mode [ 84.651762][ T5809] bridge_slave_0: entered promiscuous mode [ 84.963519][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.963642][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.963762][ T5809] bridge_slave_1: entered allmulticast mode [ 84.965284][ T5809] bridge_slave_1: entered promiscuous mode [ 85.073381][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.073508][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.073681][ T5812] bridge_slave_0: entered allmulticast mode [ 85.075471][ T5812] bridge_slave_0: entered promiscuous mode [ 85.266150][ T5801] team0: Port device team_slave_0 added [ 85.266635][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.266757][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.266913][ T5812] bridge_slave_1: entered allmulticast mode [ 85.269396][ T5812] bridge_slave_1: entered promiscuous mode [ 85.271172][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.271267][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.271373][ T5814] bridge_slave_0: entered allmulticast mode [ 85.274405][ T5814] bridge_slave_0: entered promiscuous mode [ 85.368515][ T5801] team0: Port device team_slave_1 added [ 85.412840][ T61] Bluetooth: hci0: command tx timeout [ 85.492390][ T61] Bluetooth: hci1: command tx timeout [ 85.514097][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.514185][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.514317][ T5814] bridge_slave_1: entered allmulticast mode [ 85.515795][ T5814] bridge_slave_1: entered promiscuous mode [ 85.519310][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.652496][ T61] Bluetooth: hci2: command tx timeout [ 85.892835][ T5120] Bluetooth: hci3: command tx timeout [ 85.892936][ T61] Bluetooth: hci4: command tx timeout [ 85.896711][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.966484][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.971970][ T5805] hsr_slave_0: entered promiscuous mode [ 85.974278][ T5805] hsr_slave_1: entered promiscuous mode [ 86.123601][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.123614][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.123627][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.126413][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.129813][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.215346][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.215367][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.215391][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.315631][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.317097][ T5809] team0: Port device team_slave_0 added [ 86.515393][ T5809] team0: Port device team_slave_1 added [ 86.518422][ T5812] team0: Port device team_slave_0 added [ 86.655249][ T5812] team0: Port device team_slave_1 added [ 86.724942][ T5814] team0: Port device team_slave_0 added [ 87.212817][ T5814] team0: Port device team_slave_1 added [ 87.213744][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.213752][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.213765][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.463844][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.463859][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.463881][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.470447][ T5801] hsr_slave_0: entered promiscuous mode [ 87.471266][ T5801] hsr_slave_1: entered promiscuous mode [ 87.471910][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 87.471996][ T5801] Cannot create hsr debugfs directory [ 87.476495][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.476507][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.476530][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.492494][ T61] Bluetooth: hci0: command tx timeout [ 87.583528][ T61] Bluetooth: hci1: command tx timeout [ 87.586505][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.586518][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.586542][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.599485][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.599498][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.599519][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.630792][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.630807][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.630830][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.733251][ T61] Bluetooth: hci2: command tx timeout [ 87.972332][ T61] Bluetooth: hci4: command tx timeout [ 87.972347][ T5120] Bluetooth: hci3: command tx timeout [ 88.147702][ T5809] hsr_slave_0: entered promiscuous mode [ 88.148513][ T5809] hsr_slave_1: entered promiscuous mode [ 88.149104][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 88.149126][ T5809] Cannot create hsr debugfs directory [ 88.318645][ T5812] hsr_slave_0: entered promiscuous mode [ 88.319465][ T5812] hsr_slave_1: entered promiscuous mode [ 88.320031][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 88.320049][ T5812] Cannot create hsr debugfs directory [ 88.527855][ T5814] hsr_slave_0: entered promiscuous mode [ 88.528623][ T5814] hsr_slave_1: entered promiscuous mode [ 88.529182][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 88.529201][ T5814] Cannot create hsr debugfs directory [ 89.513691][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.573960][ T61] Bluetooth: hci0: command tx timeout [ 89.593035][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.652435][ T61] Bluetooth: hci1: command tx timeout [ 89.701164][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.768332][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.821294][ T61] Bluetooth: hci2: command tx timeout [ 89.906068][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.947771][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.969361][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.022033][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.052317][ T61] Bluetooth: hci4: command tx timeout [ 90.052346][ T61] Bluetooth: hci3: command tx timeout [ 90.130351][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.171152][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.188609][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.244492][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.360574][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.407539][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.450572][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.503340][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.631762][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.641178][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.677399][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.709932][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.749050][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.814065][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.849309][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.849788][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.879331][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.911696][ T1381] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.915689][ T1381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.974163][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.011969][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.012095][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.026367][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.050643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.050767][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.111786][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.133958][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.152831][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.153202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.214775][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.214930][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.277447][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.295862][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.326030][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.326166][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.385560][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.385695][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.434243][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.480307][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.481644][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.520206][ T1381] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.520330][ T1381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.615692][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.860607][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.145051][ T5801] veth0_vlan: entered promiscuous mode [ 92.224860][ T5801] veth1_vlan: entered promiscuous mode [ 92.265244][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.386237][ T5801] veth0_macvtap: entered promiscuous mode [ 92.404288][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.411052][ T5801] veth1_macvtap: entered promiscuous mode [ 92.434546][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.440556][ T5805] veth0_vlan: entered promiscuous mode [ 92.486914][ T5809] veth0_vlan: entered promiscuous mode [ 92.491702][ T5805] veth1_vlan: entered promiscuous mode [ 92.514716][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.544488][ T5809] veth1_vlan: entered promiscuous mode [ 92.547547][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.586653][ T1175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.603414][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.606324][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.621366][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.694930][ T5812] veth0_vlan: entered promiscuous mode [ 92.768753][ T5814] veth0_vlan: entered promiscuous mode [ 92.771767][ T5805] veth0_macvtap: entered promiscuous mode [ 92.843109][ T5812] veth1_vlan: entered promiscuous mode [ 92.846632][ T5805] veth1_macvtap: entered promiscuous mode [ 92.866405][ T5809] veth0_macvtap: entered promiscuous mode [ 92.870449][ T5814] veth1_vlan: entered promiscuous mode [ 92.927011][ T5809] veth1_macvtap: entered promiscuous mode [ 92.963820][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.963843][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.990117][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.046165][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.065755][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.085566][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.085590][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.104764][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.104833][ T1175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.127469][ T1175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.136577][ T5812] veth0_macvtap: entered promiscuous mode [ 93.140295][ T1175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154448][ T1175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.165934][ T1175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169260][ T5814] veth0_macvtap: entered promiscuous mode [ 93.180581][ T1175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.181140][ T5812] veth1_macvtap: entered promiscuous mode [ 93.190617][ T1175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198674][ T1175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.247571][ T5814] veth1_macvtap: entered promiscuous mode [ 93.481859][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 93.481903][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.481922][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.481933][ T61] Workqueue: hci0 hci_rx_work [ 93.481967][ T61] Call Trace: [ 93.481977][ T61] [ 93.481986][ T61] dump_stack_lvl+0x189/0x250 [ 93.482017][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.482042][ T61] ? __pfx__printk+0x10/0x10 [ 93.482065][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 93.482085][ T61] ? kernfs_path_from_node+0x243/0x280 [ 93.482100][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 93.482120][ T61] sysfs_create_dir_ns+0x259/0x280 [ 93.482136][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 93.482154][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 93.482179][ T61] ? rt_spin_unlock+0x161/0x200 [ 93.482197][ T61] kobject_add_internal+0x5a5/0xb50 [ 93.482230][ T61] kobject_add+0x155/0x220 [ 93.482256][ T61] ? __pfx_kobject_add+0x10/0x10 [ 93.482283][ T61] ? get_device_parent+0x370/0x3a0 [ 93.482320][ T61] device_add+0x408/0xb50 [ 93.482346][ T61] hci_conn_add_sysfs+0xd5/0x1e0 [ 93.482376][ T61] le_conn_complete_evt+0xf39/0x1500 [ 93.482412][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.482433][ T61] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 93.482454][ T61] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.482478][ T61] ? skb_pull_data+0xfb/0x200 [ 93.482503][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 93.482532][ T61] hci_event_packet+0x78f/0x1200 [ 93.482554][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.482577][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 93.482604][ T61] ? hci_send_to_monitor+0xe2/0x570 [ 93.482629][ T61] hci_rx_work+0x46a/0xe80 [ 93.482656][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 93.482679][ T61] process_scheduled_works+0xae1/0x17b0 [ 93.482727][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.482764][ T61] worker_thread+0x8a0/0xda0 [ 93.482810][ T61] kthread+0x711/0x8a0 [ 93.482837][ T61] ? __pfx_worker_thread+0x10/0x10 [ 93.482858][ T61] ? __pfx_kthread+0x10/0x10 [ 93.482877][ T61] ? rt_spin_unlock+0x150/0x200 [ 93.482899][ T61] ? rt_spin_unlock+0x161/0x200 [ 93.482912][ T61] ? __pfx_kthread+0x10/0x10 [ 93.482936][ T61] ret_from_fork+0x4bc/0x870 [ 93.482959][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 93.483001][ T61] ? __switch_to_asm+0x39/0x70 [ 93.483019][ T61] ? __switch_to_asm+0x33/0x70 [ 93.483035][ T61] ? __pfx_kthread+0x10/0x10 [ 93.483061][ T61] ret_from_fork_asm+0x1a/0x30 [ 93.483099][ T61] [ 93.483787][ T61] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 93.483828][ T61] Bluetooth: hci0: failed to register connection device [ 93.745273][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.764496][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.875743][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.884471][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.973930][ T1113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.975503][ T1380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.975519][ T1380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.020873][ T1113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.044735][ T1113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.050097][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.051802][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.111772][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.112809][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.112826][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.164502][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.182576][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.216023][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.265700][ T1381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.265719][ T1381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.304534][ T5927] kvm: kvm [5925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 94.308235][ T5927] kvm: kvm [5925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 94.308307][ T5927] kvm: kvm [5925]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 94.323811][ T5927] kvm: kvm [5925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 94.323884][ T5927] kvm: kvm [5925]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 94.613575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.613593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.029140][ T1380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.029158][ T1380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.194369][ T1381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.194398][ T1381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.291681][ T5935] FAULT_INJECTION: forcing a failure. [ 95.291681][ T5935] name failslab, interval 1, probability 0, space 0, times 1 [ 95.291712][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.291731][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.291742][ T5935] Call Trace: [ 95.291749][ T5935] [ 95.291756][ T5935] dump_stack_lvl+0x189/0x250 [ 95.291792][ T5935] ? __pfx____ratelimit+0x10/0x10 [ 95.291814][ T5935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.291836][ T5935] ? __pfx__printk+0x10/0x10 [ 95.291863][ T5935] ? __pfx___might_resched+0x10/0x10 [ 95.291886][ T5935] should_fail_ex+0x46c/0x600 [ 95.291914][ T5935] should_failslab+0xa8/0x100 [ 95.291939][ T5935] __kmalloc_noprof+0xcc/0x7d0 [ 95.291960][ T5935] ? watch_queue_set_size+0x284/0x600 [ 95.291987][ T5935] watch_queue_set_size+0x284/0x600 [ 95.292018][ T5935] ? __pfx_pipe_ioctl+0x10/0x10 [ 95.292040][ T5935] pipe_ioctl+0xaa/0x490 [ 95.292062][ T5935] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.292079][ T5935] ? __pfx_pipe_ioctl+0x10/0x10 [ 95.292100][ T5935] __se_sys_ioctl+0xff/0x170 [ 95.292121][ T5935] do_syscall_64+0xfa/0xfa0 [ 95.292146][ T5935] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.292169][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.292183][ T5935] ? clear_bhb_loop+0x60/0xb0 [ 95.292201][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.292217][ T5935] RIP: 0033:0x7fbf154fefc9 [ 95.292238][ T5935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.292251][ T5935] RSP: 002b:00007fbf1375e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.292268][ T5935] RAX: ffffffffffffffda RBX: 00007fbf15755fa0 RCX: 00007fbf154fefc9 [ 95.292280][ T5935] RDX: 000000000000005e RSI: 0000000000005760 RDI: 0000000000000004 [ 95.292289][ T5935] RBP: 00007fbf1375e090 R08: 0000000000000000 R09: 0000000000000000 [ 95.292298][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.292308][ T5935] R13: 00007fbf15756038 R14: 00007fbf15755fa0 R15: 00007fffc52355e8 [ 95.292336][ T5935] [ 95.342971][ T1380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.342990][ T1380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.600546][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.600565][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.773623][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.960953][ T5816] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 95.960982][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.096606][ T5816] usb 5-1: config 0 descriptor?? [ 96.165754][ T5948] FAULT_INJECTION: forcing a failure. [ 96.165754][ T5948] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.165783][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.165800][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.165809][ T5948] Call Trace: [ 96.165816][ T5948] [ 96.165823][ T5948] dump_stack_lvl+0x189/0x250 [ 96.165850][ T5948] ? __pfx____ratelimit+0x10/0x10 [ 96.165869][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.165890][ T5948] ? __pfx__printk+0x10/0x10 [ 96.165921][ T5948] should_fail_ex+0x46c/0x600 [ 96.165944][ T5948] strncpy_from_user+0x36/0x290 [ 96.165969][ T5948] path_removexattrat+0xe0/0x690 [ 96.165986][ T5948] ? __pfx_path_removexattrat+0x10/0x10 [ 96.166000][ T5948] ? __pfx_vfs_write+0x10/0x10 [ 96.166017][ T5948] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 96.166053][ T5948] ? __pfx_ksys_write+0x10/0x10 [ 96.166077][ T5948] __x64_sys_fremovexattr+0x62/0x70 [ 96.166094][ T5948] do_syscall_64+0xfa/0xfa0 [ 96.166111][ T5948] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.166126][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.166139][ T5948] ? clear_bhb_loop+0x60/0xb0 [ 96.166155][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.166167][ T5948] RIP: 0033:0x7fe84634efc9 [ 96.166181][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.166192][ T5948] RSP: 002b:00007fe8445ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 96.166209][ T5948] RAX: ffffffffffffffda RBX: 00007fe8465a5fa0 RCX: 00007fe84634efc9 [ 96.166218][ T5948] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 96.166226][ T5948] RBP: 00007fe8445ae090 R08: 0000000000000000 R09: 0000000000000000 [ 96.166237][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.166245][ T5948] R13: 00007fe8465a6038 R14: 00007fe8465a5fa0 R15: 00007ffdd0990ab8 [ 96.166269][ T5948] [ 96.893520][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.927329][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.004388][ T5930] overlayfs: failed to resolve './file1': -2 [ 97.158356][ T5957] loop2: detected capacity change from 0 to 7 [ 97.211942][ T5957] Dev loop2: unable to read RDB block 7 [ 97.212098][ T5957] loop2: unable to read partition table [ 97.227194][ T5957] loop2: partition table beyond EOD, truncated [ 97.227280][ T5957] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.248397][ T991] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.455663][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.455745][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.455782][ T991] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 97.455800][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.523994][ T5816] usbhid 5-1:0.0: can't add hid device: -71 [ 97.524070][ T5816] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.565444][ T991] usb 1-1: config 0 descriptor?? [ 97.571924][ T5816] usb 5-1: USB disconnect, device number 2 [ 98.014990][ T991] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.015030][ T991] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.015053][ T991] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.015074][ T991] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.015094][ T991] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.015113][ T991] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.015135][ T991] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.131318][ T991] konepure 0003:1E7D:2DBE.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 98.270431][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 98.323303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.332938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.333082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.333617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.333697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.355033][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.412832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.413411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.413498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.413528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.413731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.445848][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.542877][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.681972][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 98.717545][ T5869] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 98.717572][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.717588][ T5869] usb 4-1: Product: syz [ 98.717601][ T5869] usb 4-1: Manufacturer: syz [ 98.717613][ T5869] usb 4-1: SerialNumber: syz [ 98.809003][ T5869] usb 4-1: config 0 descriptor?? [ 98.881254][ T5869] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 99.107442][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.590060][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.961849][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.339695][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.343020][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 100.352917][ T5869] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 100.353094][ T5869] visor 4-1:0.0: probe with driver visor failed with error -5 [ 100.618056][ T5888] usb 4-1: USB disconnect, device number 2 [ 100.999933][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'. [ 101.187137][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18'. [ 101.464826][ T5869] usb 1-1: USB disconnect, device number 2 [ 101.491357][ T5992] FAULT_INJECTION: forcing a failure. [ 101.491357][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 101.491387][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.1.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.491404][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.491413][ T5992] Call Trace: [ 101.491420][ T5992] [ 101.491427][ T5992] dump_stack_lvl+0x189/0x250 [ 101.491454][ T5992] ? __pfx____ratelimit+0x10/0x10 [ 101.491473][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.491494][ T5992] ? __pfx__printk+0x10/0x10 [ 101.491529][ T5992] ? __pfx___might_resched+0x10/0x10 [ 101.491546][ T5992] ? fs_reclaim_acquire+0x7d/0x100 [ 101.491573][ T5992] should_fail_ex+0x46c/0x600 [ 101.491598][ T5992] should_failslab+0xa8/0x100 [ 101.491622][ T5992] __kmalloc_cache_noprof+0x6f/0x6c0 [ 101.491644][ T5992] ? fscrypt_parse_test_dummy_encryption+0xea/0x600 [ 101.491670][ T5992] fscrypt_parse_test_dummy_encryption+0xea/0x600 [ 101.491695][ T5992] ceph_parse_mount_param+0x87f/0x18c0 [ 101.491719][ T5992] ? __pfx_ceph_parse_mount_param+0x10/0x10 [ 101.491741][ T5992] ? static_key_count+0x41/0x70 [ 101.491763][ T5992] vfs_parse_fs_param+0x1a9/0x420 [ 101.491789][ T5992] __se_sys_fsconfig+0x794/0x8e0 [ 101.491813][ T5992] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 101.491829][ T5992] ? ksys_write+0x230/0x260 [ 101.491850][ T5992] ? __pfx_ksys_write+0x10/0x10 [ 101.491873][ T5992] ? do_syscall_64+0xbe/0xfa0 [ 101.491890][ T5992] ? __x64_sys_fsconfig+0x20/0xc0 [ 101.491910][ T5992] do_syscall_64+0xfa/0xfa0 [ 101.491928][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.491947][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.491963][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 101.491984][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.492000][ T5992] RIP: 0033:0x7fbf154fefc9 [ 101.492016][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.492030][ T5992] RSP: 002b:00007fbf1375e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 101.492049][ T5992] RAX: ffffffffffffffda RBX: 00007fbf15755fa0 RCX: 00007fbf154fefc9 [ 101.492062][ T5992] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 101.492072][ T5992] RBP: 00007fbf1375e090 R08: 0000000000000000 R09: 0000000000000000 [ 101.492083][ T5992] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 101.492094][ T5992] R13: 00007fbf15756038 R14: 00007fbf15755fa0 R15: 00007fffc52355e8 [ 101.492126][ T5992] [ 101.692329][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.966455][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.966482][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.966498][ T10] usb 4-1: Product: syz [ 101.966511][ T10] usb 4-1: Manufacturer: syz [ 101.966523][ T10] usb 4-1: SerialNumber: syz [ 102.051291][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.090471][ T6003] cgroup: Unknown subsys name 'cpuset' [ 103.089768][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.267787][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.143879][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 104.147054][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.147082][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.147168][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.147205][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.147224][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.150633][ T10] usb 2-1: config 0 descriptor?? [ 105.168612][ T1240] usb 4-1: USB disconnect, device number 3 [ 105.230007][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 105.233511][ T9] ath9k_htc: Failed to initialize the device [ 105.288390][ T1240] usb 4-1: ath9k_htc: USB layer deinitialized [ 106.601617][ T10] usb 2-1: can't set config #0, error -71 [ 106.611142][ T10] usb 2-1: USB disconnect, device number 2 [ 106.790190][ T6023] loop2: detected capacity change from 0 to 7 [ 106.873672][ T6023] Dev loop2: unable to read RDB block 7 [ 106.873727][ T6023] loop2: unable to read partition table [ 106.874029][ T6023] loop2: partition table beyond EOD, truncated [ 106.875294][ T6023] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.096432][ T6029] FAULT_INJECTION: forcing a failure. [ 107.096432][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 107.096463][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.096482][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.096492][ T6029] Call Trace: [ 107.096499][ T6029] [ 107.096506][ T6029] dump_stack_lvl+0x189/0x250 [ 107.096535][ T6029] ? __pfx____ratelimit+0x10/0x10 [ 107.096555][ T6029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.096578][ T6029] ? __pfx__printk+0x10/0x10 [ 107.096601][ T6029] ? __pfx___might_resched+0x10/0x10 [ 107.096622][ T6029] should_fail_ex+0x46c/0x600 [ 107.096648][ T6029] should_failslab+0xa8/0x100 [ 107.096671][ T6029] __kvmalloc_node_noprof+0x169/0x920 [ 107.096692][ T6029] ? alloc_netdev_mqs+0xa6/0x11c0 [ 107.096718][ T6029] alloc_netdev_mqs+0xa6/0x11c0 [ 107.096736][ T6029] ? __pfx_macvlan_setup+0x10/0x10 [ 107.096766][ T6029] rtnl_create_link+0x31f/0xd10 [ 107.096817][ T6029] rtnl_newlink_create+0x25c/0xb00 [ 107.096848][ T6029] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 107.096862][ T6029] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 107.096885][ T6029] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 107.096908][ T6029] ? bpf_lsm_capable+0x9/0x20 [ 107.096932][ T6029] ? security_capable+0x7e/0x2e0 [ 107.096961][ T6029] rtnl_newlink+0x16e4/0x1c80 [ 107.096984][ T6029] ? netlink_deliver_tap+0x19c/0x1b0 [ 107.097011][ T6029] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.097048][ T6029] ? __local_bh_enable+0x27b/0x410 [ 107.097076][ T6029] ? __local_bh_enable+0x28c/0x410 [ 107.097093][ T6029] ? reacquire_held_locks+0x127/0x1d0 [ 107.097118][ T6029] ? __pfx___local_bh_enable+0x10/0x10 [ 107.097145][ T6029] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 107.097164][ T6029] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.097191][ T6029] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 107.097208][ T6029] ? dev_hard_start_xmit+0x7f5/0x870 [ 107.097228][ T6029] ? __dev_queue_xmit+0x26f/0x3b70 [ 107.097255][ T6029] ? __dev_queue_xmit+0x26f/0x3b70 [ 107.097273][ T6029] ? __dev_queue_xmit+0x26f/0x3b70 [ 107.097294][ T6029] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 107.097316][ T6029] ? __lock_acquire+0xab9/0xd20 [ 107.097360][ T6029] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.097381][ T6029] rtnetlink_rcv_msg+0x7cf/0xb70 [ 107.097408][ T6029] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 107.097429][ T6029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.097449][ T6029] ? ref_tracker_free+0x61e/0x7c0 [ 107.097471][ T6029] ? __asan_memcpy+0x40/0x70 [ 107.097489][ T6029] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.097508][ T6029] ? __skb_clone+0x63/0x7a0 [ 107.097536][ T6029] netlink_rcv_skb+0x208/0x470 [ 107.097554][ T6029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.097579][ T6029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.097608][ T6029] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.097633][ T6029] netlink_unicast+0x846/0xa10 [ 107.097666][ T6029] ? __pfx_netlink_unicast+0x10/0x10 [ 107.097690][ T6029] ? netlink_sendmsg+0x642/0xb30 [ 107.097705][ T6029] ? skb_put+0x11b/0x210 [ 107.097725][ T6029] netlink_sendmsg+0x805/0xb30 [ 107.097741][ T6029] ? is_bpf_text_address+0x26/0x2b0 [ 107.097774][ T6029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.097801][ T6029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.097822][ T6029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.097840][ T6029] __sock_sendmsg+0x21c/0x270 [ 107.097865][ T6029] ____sys_sendmsg+0x508/0x820 [ 107.097890][ T6029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.097926][ T6029] ? import_iovec+0x74/0xa0 [ 107.097949][ T6029] ___sys_sendmsg+0x21f/0x2a0 [ 107.097972][ T6029] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.098030][ T6029] ? __fget_files+0x2a/0x420 [ 107.098051][ T6029] ? __fget_files+0x3a6/0x420 [ 107.098081][ T6029] __x64_sys_sendmsg+0x1a1/0x260 [ 107.098103][ T6029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.098133][ T6029] ? rcu_is_watching+0x15/0xb0 [ 107.098158][ T6029] do_syscall_64+0xfa/0xfa0 [ 107.098177][ T6029] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.098196][ T6029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.098214][ T6029] ? clear_bhb_loop+0x60/0xb0 [ 107.098234][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.098250][ T6029] RIP: 0033:0x7f4fe17fefc9 [ 107.098265][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.098279][ T6029] RSP: 002b:00007f4fdfa5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.098298][ T6029] RAX: ffffffffffffffda RBX: 00007f4fe1a55fa0 RCX: 00007f4fe17fefc9 [ 107.098310][ T6029] RDX: 0000000008000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 107.098321][ T6029] RBP: 00007f4fdfa5e090 R08: 0000000000000000 R09: 0000000000000000 [ 107.098332][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.098342][ T6029] R13: 00007f4fe1a56038 R14: 00007f4fe1a55fa0 R15: 00007ffdebc7ecc8 [ 107.098374][ T6029] [ 107.225790][ T6034] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 107.225809][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 108.820615][ T6047] team_slave_0: entered promiscuous mode [ 108.820682][ T6047] team_slave_1: entered promiscuous mode [ 108.834850][ T6047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.071460][ T1240] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.090954][ T6054] Zero length message leads to an empty skb [ 110.258617][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.449644][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.254925][ T1240] usb 1-1: device descriptor read/all, error -110 [ 118.392389][ T1240] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.888228][ T6081] syz.0.45 uses obsolete (PF_INET,SOCK_PACKET) [ 119.173435][ T6085] openvswitch: netlink: IP tunnel dst address not specified [ 124.315249][ T6121] batman_adv: batadv0: Adding interface: gretap1 [ 124.315265][ T6121] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.315304][ T6121] batman_adv: batadv0: Interface activated: gretap1 [ 129.284718][ T6154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.284735][ T6154] IPv6: NLM_F_CREATE should be set when creating new route [ 132.880257][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.880691][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.167935][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.728356][ T6189] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.728779][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.728966][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.729305][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.729528][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.729843][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.730029][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.730217][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.730423][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.730612][ T6188] netlink: 300 bytes leftover after parsing attributes in process `syz.1.76'. [ 134.209173][ T6199] FAULT_INJECTION: forcing a failure. [ 134.209173][ T6199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.209210][ T6199] CPU: 0 UID: 0 PID: 6199 Comm: syz.4.81 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.209229][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.209238][ T6199] Call Trace: [ 134.209246][ T6199] [ 134.209253][ T6199] dump_stack_lvl+0x189/0x250 [ 134.209282][ T6199] ? __pfx____ratelimit+0x10/0x10 [ 134.209303][ T6199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.209327][ T6199] ? __pfx__printk+0x10/0x10 [ 134.209349][ T6199] ? fs_reclaim_acquire+0x7d/0x100 [ 134.209380][ T6199] should_fail_ex+0x46c/0x600 [ 134.209410][ T6199] prepare_alloc_pages+0x213/0x670 [ 134.209441][ T6199] __alloc_frozen_pages_noprof+0x123/0x370 [ 134.209470][ T6199] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.209504][ T6199] ? filemap_get_entry+0xad/0x2f0 [ 134.209523][ T6199] ? filemap_get_entry+0xad/0x2f0 [ 134.209547][ T6199] ? policy_nodemask+0x27c/0x720 [ 134.209567][ T6199] ? __pfx_filemap_get_entry+0x10/0x10 [ 134.209599][ T6199] alloc_pages_mpol+0xd1/0x380 [ 134.209626][ T6199] folio_alloc_mpol_noprof+0x39/0xe0 [ 134.209652][ T6199] shmem_get_folio_gfp+0x633/0x1a70 [ 134.209673][ T6199] ? __lock_acquire+0xab9/0xd20 [ 134.209719][ T6199] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 134.209741][ T6199] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 134.209760][ T6199] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 134.209779][ T6199] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 134.209804][ T6199] shmem_write_begin+0xef/0x2a0 [ 134.209834][ T6199] generic_perform_write+0x29d/0x8c0 [ 134.209872][ T6199] ? __pfx_generic_perform_write+0x10/0x10 [ 134.209903][ T6199] ? file_update_time+0x2e0/0x490 [ 134.209926][ T6199] shmem_file_write_iter+0xfb/0x120 [ 134.209948][ T6199] do_iter_readv_writev+0x635/0x8d0 [ 134.209976][ T6199] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 134.209996][ T6199] ? rcu_read_lock_any_held+0xb3/0x120 [ 134.210032][ T6199] vfs_writev+0x323/0x970 [ 134.210053][ T6199] ? vfs_write+0x965/0xb40 [ 134.210080][ T6199] ? __pfx_vfs_writev+0x10/0x10 [ 134.210101][ T6199] ? vfs_write+0x965/0xb40 [ 134.210132][ T6199] ? do_sys_openat2+0x154/0x1c0 [ 134.210149][ T6199] ? do_sys_openat2+0x154/0x1c0 [ 134.210179][ T6199] ? do_sys_openat2+0x154/0x1c0 [ 134.210207][ T6199] __x64_sys_pwritev+0x19a/0x2a0 [ 134.210232][ T6199] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 134.210258][ T6199] ? do_syscall_64+0xbe/0xfa0 [ 134.210282][ T6199] do_syscall_64+0xfa/0xfa0 [ 134.210300][ T6199] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.210320][ T6199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.210337][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 134.210359][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.210375][ T6199] RIP: 0033:0x7f012237efc9 [ 134.210391][ T6199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.210405][ T6199] RSP: 002b:00007f01205de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 134.210431][ T6199] RAX: ffffffffffffffda RBX: 00007f01225d5fa0 RCX: 00007f012237efc9 [ 134.210444][ T6199] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.210455][ T6199] RBP: 00007f01205de090 R08: 0000000000000000 R09: 0000000000000000 [ 134.210466][ T6199] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 134.210476][ T6199] R13: 00007f01225d6038 R14: 00007f01225d5fa0 R15: 00007ffc6c70b9c8 [ 134.210514][ T6199] [ 134.430503][ T5951] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.638410][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 134.641090][ T5951] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 134.641113][ T5951] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 134.641130][ T5951] usb 2-1: config 0 has no interface number 0 [ 134.641186][ T5951] usb 2-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.647674][ T5951] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 134.647700][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.647768][ T5951] usb 2-1: Product: syz [ 134.647781][ T5951] usb 2-1: Manufacturer: syz [ 134.647794][ T5951] usb 2-1: SerialNumber: syz [ 134.919617][ T5951] usb 2-1: config 0 descriptor?? [ 137.326611][ T5951] ath6kl: Failed to submit usb control message: -71 [ 137.326672][ T5951] ath6kl: unable to send the bmi data to the device: -71 [ 137.326684][ T5951] ath6kl: Unable to send get target info: -71 [ 137.698609][ T5951] ath6kl: Failed to init ath6kl core: -71 [ 137.722812][ T5951] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 137.803838][ T5951] usb 2-1: USB disconnect, device number 3 [ 138.168688][ T6222] FAULT_INJECTION: forcing a failure. [ 138.168688][ T6222] name failslab, interval 1, probability 0, space 0, times 0 [ 138.168719][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.1.85 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.168738][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.168748][ T6222] Call Trace: [ 138.168755][ T6222] [ 138.168763][ T6222] dump_stack_lvl+0x189/0x250 [ 138.168791][ T6222] ? __pfx____ratelimit+0x10/0x10 [ 138.168812][ T6222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.168834][ T6222] ? __pfx__printk+0x10/0x10 [ 138.168860][ T6222] ? __pfx___might_resched+0x10/0x10 [ 138.168882][ T6222] should_fail_ex+0x46c/0x600 [ 138.168908][ T6222] ? getname_flags+0xb8/0x540 [ 138.168931][ T6222] should_failslab+0xa8/0x100 [ 138.168954][ T6222] ? getname_flags+0xb8/0x540 [ 138.168974][ T6222] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 138.168996][ T6222] ? ksys_write+0x230/0x260 [ 138.169019][ T6222] getname_flags+0xb8/0x540 [ 138.169046][ T6222] __x64_sys_execveat+0xad/0xe0 [ 138.169069][ T6222] do_syscall_64+0xfa/0xfa0 [ 138.169096][ T6222] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.169115][ T6222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.169133][ T6222] ? clear_bhb_loop+0x60/0xb0 [ 138.169153][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.169170][ T6222] RIP: 0033:0x7fbf154fefc9 [ 138.169185][ T6222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.169199][ T6222] RSP: 002b:00007fbf1373d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 138.169218][ T6222] RAX: ffffffffffffffda RBX: 00007fbf15756090 RCX: 00007fbf154fefc9 [ 138.169230][ T6222] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 138.169242][ T6222] RBP: 00007fbf1373d090 R08: 0000000000000000 R09: 0000000000000000 [ 138.169253][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.169263][ T6222] R13: 00007fbf15756128 R14: 00007fbf15756090 R15: 00007fffc52355e8 [ 138.169293][ T6222] [ 139.734464][ T6237] FAULT_INJECTION: forcing a failure. [ 139.734464][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 139.734495][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.734515][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.734525][ T6237] Call Trace: [ 139.734532][ T6237] [ 139.734540][ T6237] dump_stack_lvl+0x189/0x250 [ 139.734568][ T6237] ? __pfx____ratelimit+0x10/0x10 [ 139.734590][ T6237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.734613][ T6237] ? __pfx__printk+0x10/0x10 [ 139.734640][ T6237] ? __pfx___might_resched+0x10/0x10 [ 139.734664][ T6237] ? fs_reclaim_acquire+0x7d/0x100 [ 139.734692][ T6237] should_fail_ex+0x46c/0x600 [ 139.734719][ T6237] ? ovs_flow_alloc+0x24/0x200 [ 139.734735][ T6237] should_failslab+0xa8/0x100 [ 139.734760][ T6237] ? ovs_flow_alloc+0x24/0x200 [ 139.734774][ T6237] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 139.734803][ T6237] ovs_flow_alloc+0x24/0x200 [ 139.734823][ T6237] ovs_flow_cmd_new+0x1ee/0xd80 [ 139.734845][ T6237] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 139.734874][ T6237] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 139.734947][ T6237] ? rcu_is_watching+0x15/0xb0 [ 139.734967][ T6237] ? __nla_parse+0x40/0x60 [ 139.734994][ T6237] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 139.735025][ T6237] genl_family_rcv_msg_doit+0x215/0x300 [ 139.735053][ T6237] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.735088][ T6237] ? bpf_lsm_capable+0x9/0x20 [ 139.735105][ T6237] ? security_capable+0x7e/0x2e0 [ 139.735131][ T6237] genl_rcv_msg+0x60e/0x790 [ 139.735159][ T6237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.735178][ T6237] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 139.735202][ T6237] ? __lock_acquire+0xab9/0xd20 [ 139.735233][ T6237] netlink_rcv_skb+0x208/0x470 [ 139.735251][ T6237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.735273][ T6237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.735306][ T6237] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.735322][ T6237] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.735344][ T6237] genl_rcv+0x28/0x40 [ 139.735361][ T6237] netlink_unicast+0x846/0xa10 [ 139.735394][ T6237] ? __pfx_netlink_unicast+0x10/0x10 [ 139.735419][ T6237] ? netlink_sendmsg+0x642/0xb30 [ 139.735434][ T6237] ? skb_put+0x11b/0x210 [ 139.735456][ T6237] netlink_sendmsg+0x805/0xb30 [ 139.735471][ T6237] ? is_bpf_text_address+0x26/0x2b0 [ 139.735503][ T6237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.735529][ T6237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.735551][ T6237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.735569][ T6237] __sock_sendmsg+0x21c/0x270 [ 139.735595][ T6237] ____sys_sendmsg+0x508/0x820 [ 139.735620][ T6237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.735649][ T6237] ? import_iovec+0x74/0xa0 [ 139.735677][ T6237] ___sys_sendmsg+0x21f/0x2a0 [ 139.735698][ T6237] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.735756][ T6237] ? __fget_files+0x2a/0x420 [ 139.735777][ T6237] ? __fget_files+0x3a6/0x420 [ 139.735809][ T6237] __x64_sys_sendmsg+0x1a1/0x260 [ 139.735831][ T6237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.735861][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 139.735885][ T6237] ? do_syscall_64+0xbe/0xfa0 [ 139.735909][ T6237] do_syscall_64+0xfa/0xfa0 [ 139.735928][ T6237] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.735948][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.735965][ T6237] ? clear_bhb_loop+0x60/0xb0 [ 139.735986][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.736002][ T6237] RIP: 0033:0x7fbf154fefc9 [ 139.736018][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.736031][ T6237] RSP: 002b:00007fbf1375e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.736051][ T6237] RAX: ffffffffffffffda RBX: 00007fbf15755fa0 RCX: 00007fbf154fefc9 [ 139.736063][ T6237] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 139.736075][ T6237] RBP: 00007fbf1375e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.736085][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.736096][ T6237] R13: 00007fbf15756038 R14: 00007fbf15755fa0 R15: 00007fffc52355e8 [ 139.736127][ T6237] [ 146.605319][ T6259] blktrace: Concurrent blktraces are not allowed on loop4 [ 147.174408][ T6273] FAULT_INJECTION: forcing a failure. [ 147.174408][ T6273] name fail_futex, interval 1, probability 0, space 0, times 1 [ 147.174439][ T6273] CPU: 0 UID: 0 PID: 6273 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.174458][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.174468][ T6273] Call Trace: [ 147.174475][ T6273] [ 147.174483][ T6273] dump_stack_lvl+0x189/0x250 [ 147.174510][ T6273] ? __pfx____ratelimit+0x10/0x10 [ 147.174532][ T6273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.174555][ T6273] ? __pfx__printk+0x10/0x10 [ 147.174581][ T6273] ? __lock_acquire+0xab9/0xd20 [ 147.174607][ T6273] should_fail_ex+0x46c/0x600 [ 147.174634][ T6273] get_futex_key+0xffc/0x1660 [ 147.174652][ T6273] ? _parse_integer_limit+0x1ae/0x1f0 [ 147.174684][ T6273] ? __pfx_get_futex_key+0x10/0x10 [ 147.174715][ T6273] futex_wake_op+0x132/0xd80 [ 147.174750][ T6273] ? __pfx_futex_wake_op+0x10/0x10 [ 147.174770][ T6273] ? do_raw_spin_lock+0x121/0x290 [ 147.174799][ T6273] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 147.174821][ T6273] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.174842][ T6273] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 147.174867][ T6273] do_futex+0x3bd/0x420 [ 147.174886][ T6273] ? __pfx_vfs_write+0x10/0x10 [ 147.174908][ T6273] ? __pfx_do_futex+0x10/0x10 [ 147.174925][ T6273] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 147.174942][ T6273] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 147.174966][ T6273] __se_sys_futex+0x36f/0x400 [ 147.174987][ T6273] ? fput+0xa0/0xd0 [ 147.175004][ T6273] ? ksys_write+0x230/0x260 [ 147.175022][ T6273] ? __pfx___se_sys_futex+0x10/0x10 [ 147.175042][ T6273] ? __pfx_ksys_write+0x10/0x10 [ 147.175066][ T6273] ? __x64_sys_futex+0x21/0xf0 [ 147.175088][ T6273] do_syscall_64+0xfa/0xfa0 [ 147.175108][ T6273] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.175127][ T6273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.175150][ T6273] ? clear_bhb_loop+0x60/0xb0 [ 147.175171][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.175188][ T6273] RIP: 0033:0x7fe84634efc9 [ 147.175203][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.175217][ T6273] RSP: 002b:00007fe84456c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 147.175236][ T6273] RAX: ffffffffffffffda RBX: 00007fe8465a6180 RCX: 00007fe84634efc9 [ 147.175248][ T6273] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 147.175259][ T6273] RBP: 00007fe84456c090 R08: 0000200000000000 R09: 0000000005000000 [ 147.175271][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.175281][ T6273] R13: 00007fe8465a6218 R14: 00007fe8465a6180 R15: 00007ffdd0990ab8 [ 147.175311][ T6273] [ 148.308517][ T5951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.424431][ T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 148.454973][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.455242][ T5951] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.455267][ T5951] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.455286][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.455317][ T5951] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 148.455337][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.470363][ T5951] usb 5-1: config 0 descriptor?? [ 148.586278][ T6287] CIFS: VFS: Malformed UNC in devname [ 148.604971][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 148.604997][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.638748][ T10] usb 2-1: config 0 descriptor?? [ 148.873035][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 148.873066][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.873090][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.873102][ T61] Workqueue: hci2 hci_rx_work [ 148.873127][ T61] Call Trace: [ 148.873134][ T61] [ 148.873142][ T61] dump_stack_lvl+0x189/0x250 [ 148.873175][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.873202][ T61] ? __pfx__printk+0x10/0x10 [ 148.873228][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 148.873246][ T61] ? kernfs_path_from_node+0x243/0x280 [ 148.873263][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 148.873285][ T61] sysfs_create_dir_ns+0x259/0x280 [ 148.873303][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 148.873324][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 148.873347][ T61] ? rt_spin_unlock+0x161/0x200 [ 148.873368][ T61] kobject_add_internal+0x5a5/0xb50 [ 148.873402][ T61] kobject_add+0x155/0x220 [ 148.873431][ T61] ? __pfx_kobject_add+0x10/0x10 [ 148.873463][ T61] ? get_device_parent+0x370/0x3a0 [ 148.873490][ T61] device_add+0x408/0xb50 [ 148.873515][ T61] hci_conn_add_sysfs+0xd5/0x1e0 [ 148.873545][ T61] le_conn_complete_evt+0xf39/0x1500 [ 148.873582][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 148.873604][ T61] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 148.873626][ T61] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.873652][ T61] ? skb_pull_data+0xfb/0x200 [ 148.873686][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 148.873716][ T61] hci_event_packet+0x78f/0x1200 [ 148.873739][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 148.873763][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 148.873792][ T61] ? hci_send_to_monitor+0xe2/0x570 [ 148.873818][ T61] hci_rx_work+0x46a/0xe80 [ 148.873845][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 148.873870][ T61] process_scheduled_works+0xae1/0x17b0 [ 148.873923][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.873963][ T61] worker_thread+0x8a0/0xda0 [ 148.874013][ T61] kthread+0x711/0x8a0 [ 148.874041][ T61] ? __pfx_worker_thread+0x10/0x10 [ 148.874070][ T61] ? __pfx_kthread+0x10/0x10 [ 148.874091][ T61] ? rt_spin_unlock+0x150/0x200 [ 148.874115][ T61] ? rt_spin_unlock+0x161/0x200 [ 148.874131][ T61] ? __pfx_kthread+0x10/0x10 [ 148.874157][ T61] ret_from_fork+0x4bc/0x870 [ 148.874182][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 148.874210][ T61] ? __switch_to_asm+0x39/0x70 [ 148.874227][ T61] ? __switch_to_asm+0x33/0x70 [ 148.874242][ T61] ? __pfx_kthread+0x10/0x10 [ 148.874267][ T61] ret_from_fork_asm+0x1a/0x30 [ 148.874304][ T61] [ 148.874387][ T61] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.874425][ T61] Bluetooth: hci2: failed to register connection device [ 149.121380][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.831400][ T5951] usbhid 5-1:0.0: can't add hid device: -71 [ 150.831523][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 150.860053][ T5951] usb 5-1: USB disconnect, device number 3 [ 151.044822][ T6310] __nla_validate_parse: 55 callbacks suppressed [ 151.044840][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 151.054978][ T6310] bridge_slave_1: left allmulticast mode [ 151.055006][ T6310] bridge_slave_1: left promiscuous mode [ 151.057902][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.246638][ T6310] bridge_slave_0: left allmulticast mode [ 151.246665][ T6310] bridge_slave_0: left promiscuous mode [ 151.247468][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 151.247493][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 151.248909][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 151.284275][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.314202][ T10] usb 2-1: USB disconnect, device number 4 [ 151.822275][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.972237][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 151.978427][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.979640][ T5889] usb 1-1: config 102 has an invalid interface number: 21 but max is 0 [ 151.979662][ T5889] usb 1-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config [ 151.979678][ T5889] usb 1-1: config 102 has no interface number 0 [ 151.979708][ T5889] usb 1-1: config 102 interface 21 has no altsetting 0 [ 151.982050][ T5889] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=e8.e7 [ 151.982073][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.982091][ T5889] usb 1-1: Product: syz [ 151.982103][ T5889] usb 1-1: Manufacturer: syz [ 151.982115][ T5889] usb 1-1: SerialNumber: syz [ 152.236878][ T5120] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 152.330391][ T5889] rndis_host 1-1:102.21: More than one union descriptor, skipping ... [ 152.330421][ T5889] usb 1-1: bad CDC descriptors [ 152.331314][ T5889] cdc_acm 1-1:102.21: More than one union descriptor, skipping ... [ 152.410213][ T5889] usb 1-1: USB disconnect, device number 5 [ 152.473747][ T6336] blktrace: Concurrent blktraces are not allowed on loop4 [ 152.698564][ T6343] tipc: Can't bind to reserved service type 2 [ 152.863905][ T5951] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.852285][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 153.878045][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 153.902325][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 153.908549][ T5951] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.908575][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.908593][ T5951] usb 5-1: Product: syz [ 153.908605][ T5951] usb 5-1: Manufacturer: syz [ 153.908617][ T5951] usb 5-1: SerialNumber: syz [ 153.955670][ T5951] usb 5-1: config 0 descriptor?? [ 153.968402][ T6353] loop2: detected capacity change from 0 to 7 [ 153.969635][ T6353] Dev loop2: unable to read RDB block 7 [ 153.969676][ T6353] loop2: unable to read partition table [ 153.969893][ T6353] loop2: partition table beyond EOD, truncated [ 153.969908][ T6353] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 154.052227][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 154.062741][ T5889] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 154.062767][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.062785][ T5889] usb 3-1: Product: syz [ 154.062797][ T5889] usb 3-1: Manufacturer: syz [ 154.062808][ T5889] usb 3-1: SerialNumber: syz [ 154.083146][ T5889] empeg 3-1:1.0: empeg converter detected [ 154.254361][ T5951] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.285124][ T5889] empeg 3-1:1.0: probe with driver empeg failed with error -71 [ 154.319133][ T5889] usb 3-1: USB disconnect, device number 2 [ 154.403973][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 154.406365][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 154.406395][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.409370][ T5951] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.409394][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.409412][ T5951] usb 2-1: Product: syz [ 154.409426][ T5951] usb 2-1: Manufacturer: syz [ 154.409439][ T5951] usb 2-1: SerialNumber: syz [ 154.449129][ T5951] usb 2-1: config 0 descriptor?? [ 154.495296][ T5951] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 154.495327][ T5951] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 154.582425][ T10] usb 5-1: USB disconnect, device number 4 [ 155.390049][ T5951] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 155.461757][ T5951] em28xx 2-1:0.0: Config register raw data: 0xb4 [ 155.461780][ T5951] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 155.461793][ T5951] em28xx 2-1:0.0: No AC97 audio processor [ 160.612821][ T5888] usb 2-1: USB disconnect, device number 5 [ 160.720996][ T6390] random: crng reseeded on system resumption [ 162.331017][ T6392] loop2: detected capacity change from 0 to 7 [ 162.388285][ T6392] Dev loop2: unable to read RDB block 7 [ 162.388385][ T6392] loop2: unable to read partition table [ 162.401788][ T6392] loop2: partition table beyond EOD, truncated [ 162.401845][ T6392] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.802753][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.002487][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 163.034580][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.034620][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.034734][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 163.034785][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.210698][ T10] usb 2-1: config 0 descriptor?? [ 164.020205][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020311][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020382][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020409][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020433][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020503][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020561][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020665][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020724][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.020828][ T10] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 164.401519][ T10] logitech 0003:046D:C50C.0002: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 164.745002][ T6399] netlink: 144 bytes leftover after parsing attributes in process `syz.3.144'. [ 166.051820][ T6402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.113773][ T1240] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.425721][ T1240] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 166.425809][ T1240] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 166.425866][ T1240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.360269][ T1240] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 167.440772][ T10] usb 2-1: USB disconnect, device number 6 [ 168.397344][ T1240] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 168.397366][ T1240] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 168.398443][ T1240] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 168.398461][ T1240] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 168.404584][ T1240] usb 4-1: USB disconnect, device number 4 [ 168.558634][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 170.215017][ T6428] FAULT_INJECTION: forcing a failure. [ 170.215017][ T6428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.215048][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.215067][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.215077][ T6428] Call Trace: [ 170.215084][ T6428] [ 170.215092][ T6428] dump_stack_lvl+0x189/0x250 [ 170.215120][ T6428] ? __pfx____ratelimit+0x10/0x10 [ 170.215141][ T6428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.215165][ T6428] ? __pfx__printk+0x10/0x10 [ 170.215200][ T6428] should_fail_ex+0x46c/0x600 [ 170.215229][ T6428] _copy_to_user+0x31/0xb0 [ 170.215250][ T6428] simple_read_from_buffer+0xe1/0x170 [ 170.215277][ T6428] proc_fail_nth_read+0x1b6/0x220 [ 170.215299][ T6428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.215321][ T6428] ? rw_verify_area+0x2ac/0x4e0 [ 170.215341][ T6428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.215361][ T6428] vfs_read+0x206/0xa30 [ 170.215390][ T6428] ? __pfx_vfs_read+0x10/0x10 [ 170.215406][ T6428] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 170.215434][ T6428] ? mutex_lock_nested+0x154/0x1d0 [ 170.215449][ T6428] ? fdget_pos+0x253/0x320 [ 170.215480][ T6428] ksys_read+0x14b/0x260 [ 170.215499][ T6428] ? __fget_files+0x2a/0x420 [ 170.215521][ T6428] ? __pfx_ksys_read+0x10/0x10 [ 170.215545][ T6428] ? do_syscall_64+0xbe/0xfa0 [ 170.215570][ T6428] do_syscall_64+0xfa/0xfa0 [ 170.215588][ T6428] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.215609][ T6428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.215625][ T6428] ? clear_bhb_loop+0x60/0xb0 [ 170.215646][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.215669][ T6428] RIP: 0033:0x7fe84634d9dc [ 170.215684][ T6428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 170.215698][ T6428] RSP: 002b:00007fe84458d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.215717][ T6428] RAX: ffffffffffffffda RBX: 00007fe8465a6090 RCX: 00007fe84634d9dc [ 170.215729][ T6428] RDX: 000000000000000f RSI: 00007fe84458d0a0 RDI: 000000000000000b [ 170.215740][ T6428] RBP: 00007fe84458d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.215751][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.215761][ T6428] R13: 00007fe8465a6128 R14: 00007fe8465a6090 R15: 00007ffdd0990ab8 [ 170.215792][ T6428] [ 170.462435][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 170.521868][ T5120] Bluetooth: hci3: adv larger than maximum supported [ 170.521885][ T5120] Bluetooth: hci3: Malformed LE Event: 0x0d [ 170.630138][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.630180][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 170.630200][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.651069][ T6424] Illegal XDP return value 4294967282 on prog (id 34) dev N/A, expect packet loss! [ 170.674141][ T10] usb 3-1: config 0 descriptor?? [ 170.795826][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.813952][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.819101][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.838781][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.863331][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.337504][ T6395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.356972][ T10] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.02 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 172.294280][ T6442] IPVS: Error connecting to the multicast addr [ 172.357173][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.358037][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.372456][ T5951] usb 3-1: USB disconnect, device number 3 [ 172.503055][ T6446] fido_id[6446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 172.728523][ T6395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.933758][ T5120] Bluetooth: hci1: command tx timeout [ 173.065531][ T6395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.770835][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 173.770849][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 173.770864][ T6453] netlink: 'syz.2.158': attribute type 14 has an invalid length. [ 173.834287][ T6395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.073057][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.222249][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 174.227915][ T5888] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 174.227939][ T5888] usb 4-1: config 0 has no interface number 0 [ 174.227970][ T5888] usb 4-1: config 0 interface 96 has no altsetting 0 [ 174.230652][ T5888] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 174.230677][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.230694][ T5888] usb 4-1: Product: syz [ 174.230706][ T5888] usb 4-1: Manufacturer: syz [ 174.230719][ T5888] usb 4-1: SerialNumber: syz [ 174.324730][ T5888] usb 4-1: config 0 descriptor?? [ 174.386508][ T5888] usbhid 4-1:0.96: couldn't find an input interrupt endpoint [ 174.557367][ T5951] usb 4-1: USB disconnect, device number 5 [ 174.742692][ T5951] ================================================================== [ 174.742707][ T5951] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 174.742735][ T5951] Read of size 8 at addr ffffc900059ea008 by task kworker/1:8/5951 [ 174.742749][ T5951] [ 174.742759][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.742778][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.742789][ T5951] Workqueue: usb_hub_wq hub_event [ 174.742809][ T5951] Call Trace: [ 174.742816][ T5951] [ 174.742823][ T5951] dump_stack_lvl+0x189/0x250 [ 174.742850][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.742872][ T5951] ? __pfx__printk+0x10/0x10 [ 174.742891][ T5951] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 174.742913][ T5951] ? __virt_addr_valid+0xdc/0x5c0 [ 174.742935][ T5951] ? __virt_addr_valid+0xdc/0x5c0 [ 174.742957][ T5951] print_report+0xca/0x240 [ 174.742978][ T5951] ? __list_add_valid_or_report+0x4e/0x130 [ 174.742996][ T5951] kasan_report+0x118/0x150 [ 174.743018][ T5951] ? __list_add_valid_or_report+0x4e/0x130 [ 174.743041][ T5951] __list_add_valid_or_report+0x4e/0x130 [ 174.743061][ T5951] kcov_remote_stop+0x52d/0x660 [ 174.743086][ T5951] hub_event+0x45d2/0x4a20 [ 174.743102][ T5951] ? sched_clock+0x3f/0x60 [ 174.743128][ T5951] ? do_raw_spin_lock+0x121/0x290 [ 174.743148][ T5951] ? register_lock_class+0x51/0x320 [ 174.743176][ T5951] ? __pfx_hub_event+0x10/0x10 [ 174.743200][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 174.743222][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.743241][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 174.743259][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 174.743277][ T5951] process_scheduled_works+0xae1/0x17b0 [ 174.743356][ T5951] ? __pfx_process_scheduled_works+0x10/0x10 [ 174.743383][ T5951] worker_thread+0x8a0/0xda0 [ 174.743403][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.743427][ T5951] ? __kthread_parkme+0x7b/0x200 [ 174.743450][ T5951] kthread+0x711/0x8a0 [ 174.743473][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 174.743491][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.743510][ T5951] ? rt_spin_unlock+0x150/0x200 [ 174.743527][ T5951] ? rt_spin_unlock+0x161/0x200 [ 174.743541][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.743563][ T5951] ret_from_fork+0x4bc/0x870 [ 174.743583][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 174.743604][ T5951] ? __switch_to_asm+0x39/0x70 [ 174.743620][ T5951] ? __switch_to_asm+0x33/0x70 [ 174.743635][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.743656][ T5951] ret_from_fork_asm+0x1a/0x30 [ 174.743680][ T5951] [ 174.743687][ T5951] [ 174.743691][ T5951] The buggy address belongs to a vmalloc virtual mapping [ 174.743706][ T5951] Memory state around the buggy address: [ 174.743716][ T5951] ffffc900059e9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 174.743727][ T5951] ffffc900059e9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 174.743738][ T5951] >ffffc900059ea000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 174.743752][ T5951] ^ [ 174.743761][ T5951] ffffc900059ea080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 174.743771][ T5951] ffffc900059ea100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 174.743779][ T5951] ================================================================== [ 174.743798][ T5951] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 174.743810][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.743828][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.743839][ T5951] Workqueue: usb_hub_wq hub_event [ 174.743855][ T5951] Call Trace: [ 174.743861][ T5951] [ 174.743868][ T5951] dump_stack_lvl+0x99/0x250 [ 174.743891][ T5951] ? __asan_memcpy+0x40/0x70 [ 174.743908][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.743930][ T5951] ? __pfx__printk+0x10/0x10 [ 174.743954][ T5951] vpanic+0x237/0x6d0 [ 174.743969][ T5951] ? __pfx_vpanic+0x10/0x10 [ 174.743989][ T5951] panic+0xb9/0xc0 [ 174.744004][ T5951] ? __pfx_panic+0x10/0x10 [ 174.744020][ T5951] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 174.744040][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.744060][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.744082][ T5951] ? __list_add_valid_or_report+0x4e/0x130 [ 174.744101][ T5951] check_panic_on_warn+0x89/0xb0 [ 174.744117][ T5951] ? __list_add_valid_or_report+0x4e/0x130 [ 174.744135][ T5951] end_report+0x78/0x160 [ 174.744155][ T5951] kasan_report+0x129/0x150 [ 174.744177][ T5951] ? __list_add_valid_or_report+0x4e/0x130 [ 174.744206][ T5951] __list_add_valid_or_report+0x4e/0x130 [ 174.744226][ T5951] kcov_remote_stop+0x52d/0x660 [ 174.744250][ T5951] hub_event+0x45d2/0x4a20 [ 174.744266][ T5951] ? sched_clock+0x3f/0x60 [ 174.744292][ T5951] ? do_raw_spin_lock+0x121/0x290 [ 174.744311][ T5951] ? register_lock_class+0x51/0x320 [ 174.744338][ T5951] ? __pfx_hub_event+0x10/0x10 [ 174.744354][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 174.744376][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.744395][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 174.744413][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 174.744432][ T5951] process_scheduled_works+0xae1/0x17b0 [ 174.744463][ T5951] ? __pfx_process_scheduled_works+0x10/0x10 [ 174.744490][ T5951] worker_thread+0x8a0/0xda0 [ 174.744510][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.744533][ T5951] ? __kthread_parkme+0x7b/0x200 [ 174.744558][ T5951] kthread+0x711/0x8a0 [ 174.744580][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 174.744599][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.744619][ T5951] ? rt_spin_unlock+0x150/0x200 [ 174.744637][ T5951] ? rt_spin_unlock+0x161/0x200 [ 174.744652][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.744674][ T5951] ret_from_fork+0x4bc/0x870 [ 174.744693][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 174.744714][ T5951] ? __switch_to_asm+0x39/0x70 [ 174.744730][ T5951] ? __switch_to_asm+0x33/0x70 [ 174.744745][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.744767][ T5951] ret_from_fork_asm+0x1a/0x30 [ 174.744791][ T5951] [ 174.745043][ T5951] Kernel Offset: disabled